Arkanix Stealer targets a variety of data, offers a MaaS referral programKaspersky Securelist·Feb 19, 11:01 UTC · Feb 19, 2026Malware30
New HttpTroy Backdoor Poses as VPN Invoice in Targeted Cyberattack on South KoreaThe Hacker News·Nov 3, 10:42 UTC · Nov 3, 2025Malware42
Stealit Malware spreads via fake game & VPN installers on Mediafire and DiscordSecurity Affairs·Oct 13, 07:26 UTC · Oct 13, 2025Malware55
⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & MoreThe Hacker News·Aug 5, 04:38 UTC · Aug 5, 2025Malware in the wildCVE-2025-40596CVE-2025-40597CVE-2025-40598+8 CVEs60
Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and MalwareThe Hacker News·Jul 29, 09:05 UTC · Jul 29, 2025MalwareCVE-2023-38950CVE-2023-38951CVE-2023-3895260
PLAYFULGHOST Delivered via Phishing and SEO Poisoning in Trojanized VPN AppsThe Hacker News·Jan 7, 04:22 UTC · Jan 7, 2025Malware42
Quad7 Botnet Expands to Target SOHO Routers and VPN AppliancesThe Hacker News·Sep 11, 16:20 UTC · Sep 11, 2024Malware42
Hackers Use Fake GlobalProtect VPN Software in New WikiLoader Malware AttackThe Hacker News·Sep 4, 05:31 UTC · Sep 4, 2024Malware42
Chinese Hackers Exploiting Ivanti VPN Flaws to Deploy New MalwareThe Hacker News·Feb 29, 07:05 UTC · Feb 29, 2024Malware in the wildCVE-2024-21893CVE-2024-2188760
Multiple malware used in attacks exploiting Ivanti VPN flawsSecurity Affairs·Feb 1, 10:53 UTC · Feb 1, 2024Malware in the wildCVE-2023-46805CVE-2024-21887CVE-2024-21888+1 CVEs60
Threat actors exploit Ivanti VPN bugs to deploy KrustyLoader MalwareSecurity Affairs·Jan 31, 11:45 UTC · Jan 31, 2024MalwareCVE-2023-46805CVE-2024-2188760
Bahamut Spyware Group Compromises Android Devices Via Fake VPN AppsInfosecurity Magazine·Nov 24, 16:00 UTC · Nov 24, 2022Malware42
ZTNAs Address Requirements VPNs Cannot. Here's Why.The Hacker News·Feb 1, 04:03 UTC · Feb 1, 2022Malware30
A New Spyware is Targeting Telegram and Psiphon VPN Users in IranThe Hacker News·Jun 17, 10:25 UTC · Jun 17, 2021Malware42
Secret Backdoor Account Found in Several Zyxel Firewall, VPN ProductsThe Hacker News·Jan 4, 17:12 UTC · Jan 4, 2021MalwareCVE-2020-2958360
Avast Secure Browser for Android released, includes a built-in VPNHelp Net Security·Apr 8, 00:00 UTC · Apr 8, 2020Malware30
Correcting the Record on vDOS ProsecutionsKrebs on Security·Nov 21, 16:37 UTC · Nov 21, 2017Malware30
Behind the Curtain: How Lumma Affiliates OperateRecorded Future·Nov 28, 00:00 UTC · Nov 28, 2025Malware55
New Stealit Malware Campaign Spreads via VPN and Game Installer AppsInfosecurity Magazine·Oct 13, 14:45 UTC · Oct 13, 2025Malware42
Stealit Malware Abuses Node.js Single Executable Feature via Game and VPN InstallersThe Hacker News·Oct 10, 14:25 UTC · Oct 10, 2025Malware42
Hackers Use Fake VPN and Browser NSIS Installers to Deliver Winos 4.0 MalwareThe Hacker News·May 27, 11:38 UTC · May 27, 2025Malware42
Hackers target dozens of VPN and AI extensions for Google Chrome to compromise dataThe Record·Jan 2, 19:57 UTC · Jan 2, 2025Malware30
Palo Alto’s GlobalProtect VPN Spoofed to Deliver New Malware VariantInfosecurity Magazine·Sep 3, 14:30 UTC · Sep 3, 2024Malware42
Hackers Exploiting Ivanti VPN Flaws to Deploy KrustyLoader MalwareThe Hacker News·Jan 31, 09:32 UTC · Jan 31, 2024MalwareCVE-2023-46805CVE-2024-2188760
How Kaspersky obtained all stages of Operation TriangulationKaspersky Securelist·Oct 26, 10:30 UTC · Oct 26, 2023Malware30
Who and What is Behind the Malware Proxy Service SocksEscort?Krebs on Security·Jul 26, 05:12 UTC · Jul 26, 2023Malware30
Lookout releases new endpoint agents to replace virtual private networksHelp Net Security·Jul 25, 00:00 UTC · Jul 25, 2023Malware30
Crypto-Stealing OpcJacker Malware Targets Users with Fake VPN ServiceThe Hacker News·Apr 3, 09:20 UTC · Apr 3, 2023Malware42
SandStrike, a previously undocumented Android malware targets a PersianSecurity Affairs·Nov 2, 18:55 UTC · Nov 2, 2022Malware42
14 Ways to Evade Botnet Malware Attacks On Your ComputersThe Hacker News·Dec 18, 13:34 UTC · Dec 18, 2019Malware55
ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware WavesThe Hacker News·Nov 21, 06:45 UTC · Nov 21, 2025MalwareCVE-2025-61757CVE-2025-1124360
Inside Japanese-Speaking Underground Cyber CommunitiesRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Malware30
Flax Typhoon APT exploited ArcGIS server for over a year as a backdoorSecurity Affairs·Oct 15, 07:11 UTC · Oct 15, 2025Malware55
Iranian Hackers Deploy New Android Spyware VersionInfosecurity Magazine·Jul 21, 17:30 UTC · Jul 21, 2025Malware42
⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and MoreThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462CVE-2025-32463CVE-2025-20309+23 CVEs60
SonicWall NetExtender Trojan and ConnectWise Exploits Used in Remote Access AttacksThe Hacker News·Jun 26, 07:05 UTC · Jun 26, 2025Malware30
SilentCryptoMiner Infects 2,000 Russian Users via Fake VPN and DPI Bypass ToolsThe Hacker News·Mar 10, 04:12 UTC · Mar 10, 2025Malware30