malware Archives • Daily CyberSecurity

TELESHIM Malware Targets Middle East Governments Through Telegram SonicWall Reconnaissance Akira Ransomware residential proxy malware TraderTraitor BreachForums Honeypot, French Interior Ministry Leak

SonicWall Reconnaissance Akira Ransomware residential proxy malware TraderTraitor BreachForums Honeypot, French Interior Ministry Leak

TELESHIM Malware Targets Middle East Governments Through Telegram

Do Son July 27, 2026

At a glance Threat actor Unnamed group with links to East Asia (moderate-to-high confidence) Activity type Targeted...

TAG-150 Attack Chain Deploys DenoRAT Malware hack

TAG-150 Attack Chain Deploys DenoRAT Malware

Do Son July 24, 2026

A recent cyberattack targeted a financial institution using a ClickFix social engineering lure. This incident revealed an...

HelloNet Campaign Abuses ViPNet Update System to Hit Russian Firms HelloNet campaign malware delivered through the ViPNet update system on a Russian workstation

HelloNet campaign malware delivered through the ViPNet update system on a Russian workstation

HelloNet Campaign Abuses ViPNet Update System to Hit Russian Firms

Do Son July 23, 2026

At a glance Actor / group Suspected Chinese-speaking APT group (low confidence) Activity type Cyberespionage using malicious...

RokRAT Malware Hides in Fake PDF Files to Spy on Academics APT37 RokRAT malware delivered via fake PDF in Operation Capsule Vault spear-phishing

APT37 RokRAT malware delivered via fake PDF in Operation Capsule Vault spear-phishing

RokRAT Malware Hides in Fake PDF Files to Spy on Academics

Do Son July 17, 2026

At a glance Malware family RokRAT variant (x64) Threat actor Assessed highly likely APT37 (suspected, not confirmed)...

Supply Chain Trojan Targets Software Developers Through Project Files Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

Supply Chain Trojan Targets Software Developers Through Project Files

Do Son July 17, 2026

At a glance Malware family Multi-stage trojan (Doctor Web: Trojan.DownLoader49, BackDoor.Siggen2.5906, Trojan.BtcMine.3956) Threat actor Unknown; not attributed...

Mexican Banking Fraud: REF6045 Operation Exposed Diagram of the REF6045 operation executing Mexican banking fraud using SCMBANKER.

Mexican Banking Fraud: REF6045 Operation Exposed

Do Son July 14, 2026

On June 18, 2026, security analysts detected a host downloading suspicious PowerShell scripts from an open directory....

Cavern Manticore APT Deploys Modular C2 Framework digital-hacker

Cavern Manticore APT Deploys Modular C2 Framework

Do Son July 13, 2026

At a Glance Actor or group: Cavern Manticore APT (suspected Iran-linked) Activity type: Cyber-espionage and network infiltration...

Armored Likho APT Deploys New BusySnake Stealer Diagram showing BusySnake Stealer infection chain by Armored Likho APT

Armored Likho APT Deploys New BusySnake Stealer

Do Son July 13, 2026

At a Glance Actor or group: Armored Likho APT (suspected) Activity type: Spear-phishing and information theft Targets...

FBI Warns of TeamPCP Supply Chain Attack TeamPCP supply chain attack and software supply chain compromise alert

FBI Warns of TeamPCP Supply Chain Attack

Do Son July 4, 2026

At a glance Actor TeamPCP Activity type Software supply chain compromise Targets Enterprise developers, security tools Scale...

Silent Swap Crypto Clipper Hides in Google Notes Extension Diagram showing the Silent Swap crypto clipper and Google Notes extension infection chain

Diagram showing the Silent Swap crypto clipper and Google Notes extension infection chain

Silent Swap Crypto Clipper Hides in Google Notes Extension

Do Son July 3, 2026

Unsigned software installers are distributing a dangerous new malware strain that quietly intercepts digital currency transactions. Security...

Hospitality Malware Campaign Deploys Node.js Implant digital-hacker

Hospitality Malware Campaign Deploys Node.js Implant

Do Son June 30, 2026

At a glance Actor: Unknown threat actor Activity type: Phishing and multi-stage intrusion Targets: Hospitality and hotel...

TinyRCT Backdoor Attacks Target Asian Critical Infrastructure digital-hacker

TinyRCT Backdoor Attacks Target Asian Critical Infrastructure

Do Son June 30, 2026

At a glance Actor or Group: CL-STA-1062 (suspected Chinese-speaking actors) Activity Type: Cyber espionage and network infiltration...

Thailand Healthcare Malware Exploits RAR Archives Diagram showing the Thailand healthcare malware infection chain via RAR archive phishing

Diagram showing the Thailand healthcare malware infection chain via RAR archive phishing

Thailand Healthcare Malware Exploits RAR Archives

Do Son June 29, 2026

At a glance Actor: Suspected unknown threat cluster (tracked by Seqrite Lab) Activity Type: Spear-phishing, credential theft,...

Mistic Backdoor Linked to Ransomware Access Broker Mistic backdoor malware and ransomware access broker diagram

Mistic Backdoor Linked to Ransomware Access Broker

Do Son June 27, 2026

At a glance Malware Family: Backdoor.Mistic Threat Actor: Suspected Woodgnat (aka KongTuke) Target or Victims: Insurance, education,...

Windows Crypto Clipper Malware Exposed digital-hacker

Windows Crypto Clipper Malware Exposed

Do Son June 25, 2026

Microsoft Threat Intelligence discovered a new cryptocurrency stealer affecting users since February 2026. This Windows crypto clipper...

Vidar ABE Bypass Technique Steals Browser Keys Vidar ABE bypass technique flowchart showing how Vidar infostealer malware extracts keys

Vidar ABE Bypass Technique Steals Browser Keys

Do Son June 25, 2026

Gen Digital researchers recently discovered a new Vidar ABE bypass technique. The Vidar infostealer malware extracts the...

Google Uncovers UNC6508 Cyber Espionage Campaign Diagram showing UNC6508 cyber espionage attack flow and INFINITERED malware.

Google Uncovers UNC6508 Cyber Espionage Campaign

Do Son June 22, 2026

At a Glance Actor: UNC6508 (suspected PRC-nexus threat actor) Activity Type: Cyber espionage, bespoke malware deployment, data...

Malicious Steam Wallpapers Spread Malware to Gamers Malicious Steam wallpapers targeting the Wallpaper Engine app

Malicious Steam Wallpapers Spread Malware to Gamers

Do Son June 22, 2026

At a Glance Malware Family: Various (DarkKomet, infostealers, crypto miners) Threat Actor: Suspected multiple independent hacking groups...

ShapedPlugin Supply Chain Attack CVE-2026-10735, CVE-2026-49777, WordPress Plugin Malware

ShapedPlugin Supply Chain Attack Exposes WordPress Sites

Do Son June 16, 2026

A dangerous ShapedPlugin supply chain attack is currently threatening WordPress websites. Security researchers at Wordfence discovered this...

Inside the Stealthy Agent Tesla Infection Chain CVE-2023-24059

Inside the Stealthy Agent Tesla Infection Chain

Do Son June 16, 2026

What looks like a simple payment receipt attachment can sometimes be the start of something far more...

Sophisticated GPU Cryptojacking Campaign Surfaced by Microsoft Experts Cemu emulator Linux malware Blitz Brigantine AOBackdoor GitHub Malware Campaign StealC Infostealer TamperedChef Malware, SEO Poisoning Carbanak malware RubyGems Supply Chain, Infostealer

Cemu emulator Linux malware Blitz Brigantine AOBackdoor GitHub Malware Campaign StealC Infostealer TamperedChef Malware, SEO Poisoning Carbanak malware RubyGems Supply Chain, Infostealer

Sophisticated GPU Cryptojacking Campaign Surfaced by Microsoft Experts

Do Son June 1, 2026

Microsoft Defender Experts recently identified a highly targeted digital threat spreading across the internet. Specifically, a dangerous...

Twill Typhoon Exploits CDN Masquerading and DLL Sideloading to Breach APJ Networks Twill Typhoon DLL Sideloading

Twill Typhoon Exploits CDN Masquerading and DLL Sideloading to Breach APJ Networks

Do Son May 22, 2026

A sophisticated, highly targeted cyber-espionage campaign is actively penetrating corporate and critical infrastructure networks across the Asia-Pacific...