Malware Campaign Archives • Daily CyberSecurity

Silver Fox Fake Software Installers Disable Windows Defender

Spirals ransomware double extortion attack chain from IIS web shell to network encryption

Silver Fox Fake Software Installers Disable Windows Defender

Do Son September 7, 2026

Silver Fox fake software installers impersonate Razer and Edge to disable Windows Defender and deploy malware. See how the campaign works.

Grandoreiro Banking Trojan Returns With a DLL Sideloading Campaign TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm

TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm

Grandoreiro Banking Trojan Returns With a DLL Sideloading Campaign

Do Son August 26, 2026

Grandoreiro banking trojan resurfaces in a DLL sideloading campaign that abuses Duplicate Files Finder to hit Mexico and Latin America.

PATCHCORD Malware Hits Afghan Telecom in New APT36 Campaign PATCHCORD malware APT36 SHEETCORD malware Afghan telecom diagram

PATCHCORD Malware Hits Afghan Telecom in New APT36 Campaign

Do Son August 19, 2026

Acronis ties a new PATCHCORD malware APT36 campaign to Afghan telecom and Indian targets. SHEETCORD malware abuses Google Sheets for C2.

ScreenConnect AsyncRAT Campaign Hides Inside Fake Freeware

ScreenConnect AsyncRAT Campaign infrastructure and remote monitoring tools

ScreenConnect AsyncRAT Campaign Hides Inside Fake Freeware

Do Son July 13, 2026

A massive ScreenConnect AsyncRAT campaign uses SEO poisoning and spoofed websites to drop malicious installer archives via remote monitoring tools.

Havoc Stager Campaign Exploits Fake Invoices to Compromise Networks BingX cyberattack FortiGate SSO Attacks Firewall Config Theft

Havoc Stager Campaign Exploits Fake Invoices to Compromise Networks

Do Son June 10, 2026

Discover how the Havoc stager campaign exploits fake invoices. Read the LevelBlue SpiderLabs report detailing this stealthy threat.

Malicious Traffic Routing Stack Exploited to Spread Global Malware malicious traffic routing Check Point research report

Malicious Traffic Routing Stack Exploited to Spread Global Malware

Do Son June 9, 2026

Discover how malicious traffic routing hijacks open-source downloads in this new Check Point research report on global malware distribution.

Argamal Trojan Campaign Targets Adult Gamers with COM Hijacking Argamal Trojan campaign Kaspersky malware analysis

Argamal Trojan Campaign Targets Adult Gamers with COM Hijacking

Do Son June 9, 2026

Read the Kaspersky malware analysis revealing how the Argamal Trojan campaign targets adult gamers using stealthy COM hijacking.

GitHub & Dropbox Weaponized: “Defendnot” Tool Used to Disable Windows Defender Defendnot Abuse Multi-Stage Malware Campaign

GitHub & Dropbox Weaponized: “Defendnot” Tool Used to Disable Windows Defender

Do Son January 22, 2026

Attackers abuse GitHub, Dropbox, and the "Defendnot" research tool to disable Windows Defender and deploy Amnesia RAT & ransomware in Russia.

Lampion Malware Returns with ClickFix Tactics to Target Portuguese Sectors Lampion, ClickFix

Lampion Malware Returns with ClickFix Tactics to Target Portuguese Sectors

Do Son May 8, 2025

Unit 42 uncovers a sophisticated Lampion malware campaign using ClickFix social engineering tactics to target government and financial sectors in Portugal.

QiAnXin Uncovers New Kimsuky Malware Campaign

Do Son March 10, 2024

Security researchers at QiAnXin Threat Intelligence Center have uncovered a sophisticated malware campaign waged by the Kimsuky APT group

The Hidden Threat in Pirated macOS Applications: Unveiling a New Malware Campaign macOS Malware Campaign

The Hidden Threat in Pirated macOS Applications: Unveiling a New Malware Campaign

Do Son January 21, 2024

Jamf Threat Labs researchers Ferdous Saljooki and Jaron Bradley discovered a new macOS malware campaign lurking within pirated software