SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 118
Security Affairs Round 118 collects reports on ClingSTUN, npm supply-chain theft, AhsayCBS exploitation, and other malware campaigns.
Security Affairs Malware Newsletter Round 118 is a digest of recent malware reporting rather than a single incident write-up. Headlines cover the ClingSTUN Linux backdoor, UAC-0277 using ClickFix to distribute LUNEXSTEALER, long-running MALFEX npm postinstall malware, and a TensorLake npm SDK compromise linked to ChainDrop and Shai-Hulud credential theft. Other items cite the Wazza phishkit targeting US, EU, and Australian sectors, a P7 DarkSword variant, exploitation of critical AhsayCBS flaws to deploy webshells and XMRig, the FakeGit repository fleet, and Midnight Mimosa phone compromise. The list also points to research on malware deception, LLM-assisted analysis, and IoT and memory-forensic detection.