Do Son A detailed analysis by the Splunk Threat Research Team reveals a multi-pronged attack and the use of a new backdoor malware called ‘WINELOADER’
Malware
A detailed analysis by Sucuri has uncovered a sophisticated malware campaign that has shifted strategies to become more elusive and harder to detect
The DuneQuixote campaign, active since at least February 2023, utilizes a custom malware known as "CR4T" alongside droppers
GhostLocker 2.0 builds upon the original version, demonstrating the active development and sophistication of this threat
Further complicating the malware's capabilities was the introduction of the previously undocumented Kaolin RAT.
Security researchers have uncovered a persistent, multi-component virus known as OfflRouter that has been quietly infecting Ukrainian systems
Researchers have uncovered a dangerous new variant of the Redline Stealer malware that uses clever obfuscation tactics
SoumniBot malware is notable for its employment of unconventional obfuscation techniques centered on manipulating the Android manifest file
Cybersecurity researchers are tracking a significant escalation in activity from the GOLD IONIC ransomware group
Mamont malware, currently targeting Russian-speaking individuals, masquerades as a fake Google Chrome app to trick unsuspecting users
the cybersecurity landscape faces a formidable threat in the form of "Mobile NotPetya," a potential zero-click, wormable mobile malware
The Evil Ant ransomware, written in Python and compiled using PyInstaller, targets a wide array of files in a victim's folders
This pervasive campaign, aptly named "SteganoAmor" due to its use of steganography—a method of hiding malware within innocuous-looking files
Even without the final payload, WikiLoader poses a significant risk by meticulously gathering information about the infected system
The resurgence of the LightSpy mobile spyware campaign poses a renewed and alarming threat to individuals and organizations
A potent new banking trojan dubbed "Coyote" is sweeping through Brazil's financial sector, prompting urgent warnings
The main component of this multi-stage attack is the FatalRAT malware. This grants the attackers remote control over a victim's computer
Apple has sent warnings to a growing number of users, alerting them about highly sophisticated mercenary spyware attacks
Cybercriminals, demonstrating both ingenuity and malice, have initiated a campaign that manipulates GitHub's search functionality to distribute malware
The cornerstone of this campaign is the deployment of Rhadamanthys, an information-stealing malware previously unseen in TA547's arsenal
Threat actors are compromising these popular data stores to install the potent Metasploit Meterpreter backdoor.
The timing of the artifacts associated with this campaign suggests that Starry Addax may be ramping up its operations.