G DATA Archives • Daily CyberSecurity

Projextor Malware Hides in Fake PDF and Recipe Apps Projextor Electron malware fake PDF converter and recipe apps diagram showing injected scripts and desktop capture

Projextor Electron malware fake PDF converter and recipe apps diagram showing injected scripts and desktop capture

Projextor Malware Hides in Fake PDF and Recipe Apps

Do Son August 21, 2026

At a glance Malware family Projextor (Electron-based) Threat actor Unknown; shared code base, no confirmed single operator...

Stealthy New Remcos RAT Variant Evades Detection Using Innovative Staging Layers new Remcos RAT variant DonutLoader shellcode

Stealthy New Remcos RAT Variant Evades Detection Using Innovative Staging Layers

Do Son June 5, 2026

Advanced Phishing Campaigns Exploit Windows Administrative Tools Security researchers recently uncovered a highly sophisticated software compromise spreading...

Attackers Are Weaponizing Foxit PDF Reader’s Reputation Foxit PDF Malware UltraVNC Hijack

Attackers Are Weaponizing Foxit PDF Reader’s Reputation

Do Son April 28, 2026

A recent report from G DATA highlights a sophisticated campaign targeting users of Foxit Software, a popular...

The Malware That Chats Back: Inside G DATA’s Real-Time Notepad Encounter with the “Kiss Loader” Author Kiss Loader Early Bird APC Injection

The Malware That Chats Back: Inside G DATA’s Real-Time Notepad Encounter with the “Kiss Loader” Author

Do Son March 31, 2026

While analyzing a new piece of malware dubbed “Kiss Loader,” G DATA Security Center found themselves in...

PlugX Evolves: New “Meeting Invitation” Phishing Campaign Leverages Trusted Security Software Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage

Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage

PlugX Evolves: New “Meeting Invitation” Phishing Campaign Leverages Trusted Security Software

Do Son March 4, 2026

Cybersecurity researchers at LAB52 have released a detailed analysis of a new infection chain for the long-running...

The High Cost of ‘Free’: How PiviGames Became a Lovecraftian Malware Hub for HijackLoader and ACRStealer Lotus Wiper Digital Sabotage G_Wagon Malware NPM Supply Chain Attack IMAPLoader malware ResolverRAT Malware Evasion

Lotus Wiper Digital Sabotage G_Wagon Malware NPM Supply Chain Attack IMAPLoader malware ResolverRAT Malware Evasion

The High Cost of ‘Free’: How PiviGames Became a Lovecraftian Malware Hub for HijackLoader and ACRStealer

Do Son March 3, 2026

In the world of PC gaming, the lure of “free” pirated content has always carried risks. However,...

Next-Gen Stealer Arkanix Bypasses Chrome App-Bound Encryption Using C++ Process Injection Arkanix Stealer, App-Bound Encryption Bypass

Next-Gen Stealer Arkanix Bypasses Chrome App-Bound Encryption Using C++ Process Injection

Do Son December 2, 2025

A new, rapidly evolving threat has entered the crowded landscape of malware-as-a-service. Researchers at G DATA have...

BlockBlasters: When a Steam Game Turns Into a Malware Delivery Vehicle WAGO, vulnerability, industrial automation BlockBlasters, Steam malware Baxter Life2000 Ventilation System - CVE-2024-48966