ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New StoriesThe Hacker News·Jun 4, 14:00 UTC · Jun 4, 2026Malware in the wildCVE-2026-20230160
Sophos uncovers AI-powered malware lab built for EDR evasionHelp Net Security·Jun 2, 00:00 UTC · Jun 2, 2026Malware142
Week in review: Infostealer dropped via FortiClient EMS flaw, exploited Trend Micro Apex One flawHelp Net Security·May 31, 00:00 UTC · May 31, 2026Malware in the wildCVE-2026-45659CVE-2026-34926CVE-2026-3561660
GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack InfrastructureThe Hacker News·May 27, 15:23 UTC · May 27, 2026Malware42
How cybersecurity firms took down Glassworm botnet in one shotSecurity Affairs·May 27, 11:35 UTC · May 27, 2026Malware42
Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential StealerThe Hacker News·May 25, 09:00 UTC · May 25, 2026Malware142
Researchers Warn CypherLoc Scareware Has Targeted Millions of UsersInfosecurity Magazine·May 20, 10:00 UTC · May 20, 2026Malware42
Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 MalwareThe Hacker News·Apr 28, 04:06 UTC · Apr 28, 2026Malware42
JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil in 2025The Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Malware30
GlassWorm evolves with Zig dropper to infect multiple developer toolsSecurity Affairs·Apr 11, 16:27 UTC · Apr 11, 2026Malware42
CrystalX RAT: new MaaS malware combines spyware, stealer, and remote accessSecurity Affairs·Apr 3, 13:27 UTC · Apr 3, 2026Malware30
Open-source tool Sage puts a security layer between AI agents and the OSHelp Net Security·Mar 9, 00:00 UTC · Mar 9, 2026Malware42
Self-spreading npm malware targets developers in new supply chain attackHelp Net Security·Feb 24, 00:00 UTC · Feb 24, 2026Malware42
Shai-Hulud-Like Worm Targets Developers via npm and AI ToolsInfosecurity Magazine·Feb 23, 16:00 UTC · Feb 23, 2026Malware42
Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API TokensThe Hacker News·Feb 23, 10:20 UTC · Feb 23, 2026Malware142
French NGO Reporters Without Borders Targeted by Star BlizzardInfosecurity Magazine·Dec 3, 16:45 UTC · Dec 3, 2025Malware30
Desktop and IoT malware report for Q3 2025Kaspersky Securelist·Nov 19, 10:00 UTC · Nov 19, 2025MalwareCVE-2024-4076660
Malicious VSX Extension "SleepyDuck" Uses Ethereum to Keep Its Command Server AliveThe Hacker News·Nov 4, 04:23 UTC · Nov 4, 2025Malware30
⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and MoreThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462CVE-2025-32463CVE-2025-20309+23 CVEs60
PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud EnvironmentsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025Malware142
Writing a BugSleep C2 server and detecting its traffic with SnortCisco Talos·Oct 30, 10:00 UTC · Oct 30, 2024Malware130
Hackers Target Middle East Governments with Evasive "CR4T" BackdoorThe Hacker News·Apr 19, 06:16 UTC · Apr 19, 2024Malware42
New Coyote Trojan Targets 61 Brazilian Banks with NimThe Hacker News·Feb 9, 12:48 UTC · Feb 9, 2024Malware30
Coyote: A multi-stage banking Trojan abusing the Squirrel installerKaspersky Securelist·Feb 8, 13:02 UTC · Feb 8, 2024Malware30
Fruitfly: Unusual Mac backdoor used for tightly targeted attacks?Help Net Security·Jan 8, 12:43 UTC · Jan 8, 2024Malware42
New SugarGh0st RAT targets Uzbekistan government and South KoreaCisco Talos·Nov 30, 13:00 UTC · Nov 30, 2023Malware30
Molerats group uses public cloud services as attack infrastructureSecurity Affairs·Jan 23, 14:41 UTC · Jan 23, 2022Malware55
Trojan Source attack method allows hiding flaws in source codeSecurity Affairs·Nov 2, 11:55 UTC · Nov 2, 2021MalwareCVE-2021-42574CVE-2021-4269447
Experts Uncover Malware Attacks Targeting Corporate Networks in Latin AmericaThe Hacker News·Jul 8, 09:58 UTC · Jul 8, 2021Malware30
A new trojan dubbed Lampion is targeting PortugalSecurity Affairs·Dec 29, 12:58 UTC · Dec 29, 2019Malware30
Writing Your First Bootloader for Better AnalysesSecurity Affairs·Sep 3, 16:20 UTC · Sep 3, 2019Malware42
New Banking Trojan MnuBot uses SQL Server for Command and ControlSecurity Affairs·May 30, 07:15 UTC · May 30, 2018Malware30
Apple Users, Beware! A Nearly-Undetectable Malware Targeting Mac ComputersThe Hacker News·Jul 25, 09:51 UTC · Jul 25, 2017Malware42
Newly Discovered Mac Malware with Ancient Code Spying on Biotech FirmsThe Hacker News·Jan 19, 08:52 UTC · Jan 19, 2017Malware42
Quimitchin, a Mac backdoor that includes antiquated codeSecurity Affairs·Jan 19, 06:44 UTC · Jan 19, 2017Malware42
New malware for Mac: Backdoor.OSX.MorcutKaspersky Securelist·Jul 26, 17:31 UTC · Jul 26, 2012Malware142
Monthly Malware Statistics, June 2011Kaspersky Securelist·Jul 6, 11:22 UTC · Jul 6, 2011MalwareCVE-2010-4452CVE-2010-0886CVE-2010-188547
Kaspersky Security Bulletin, January – June 2006: Malware for non Win32 platformsKaspersky Securelist·Sep 22, 18:29 UTC · Sep 22, 2006Malware55