Week in review: Self-spreading npm malware hits developers, Cisco SD-WAN 0-day exploited since 2023Help Net Security·Mar 1, 00:00 UTC · Mar 1, 2026Malware in the wildCVE-2026-25108CVE-2026-20127160
North Korea’s ScarCruft Deploys KoSpy Malware, Spying on Android Users via Fake Utility AppsThe Hacker News·Dec 18, 07:30 UTC · Dec 18, 2025Malware42
Week in review: Fake “Windows Update” fuels malware, Salesforce details Gainsight breachHelp Net Security·Nov 30, 00:00 UTC · Nov 30, 2025Malware30
DDoS Botnet Aisuru Blankets US ISPs in Record DDoSKrebs on Security·Oct 10, 17:41 UTC · Oct 10, 2025Malware30
DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job ScamsThe Hacker News·Sep 22, 15:17 UTC · Sep 22, 2025Malware42
North Korean Hackers Flood npm Registry with XORIndex Malware in Ongoing Attack CampaignThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware42
Famous Chollima deploying Python version of GolangGhost RATCisco Talos·Jun 18, 10:00 UTC · Jun 18, 2025Malware130
Week in review: Exploited 7-Zip 0-day flaw, crypto-stealing malware found on App Store, Google PlayHelp Net Security·Feb 9, 00:00 UTC · Feb 9, 2025MalwareCVE-2025-0411CVE-2025-25181CVE-2024-57968+1 CVEs60
Cross-Platform JavaScript Stealer Targets Crypto Wallets in New Lazarus Group CampaignThe Hacker News·Feb 6, 04:40 UTC · Feb 6, 2025Malware42
Week in review: MOVEit auth bypass flaws quitely fixed, open-source Rafel RAT targets AndroidsHelp Net Security·Jun 30, 00:00 UTC · Jun 30, 2024MalwareCVE-2024-5805CVE-2024-5806CVE-2024-527660
North Korean Hackers Targeting Developers with Malicious npm PackagesThe Hacker News·Feb 27, 04:27 UTC · Feb 27, 2024Malware42
Week in review: Kali Linux 2022.1 released, attackers leveraging Microsoft Teams to spread malwareHelp Net Security·Feb 20, 00:00 UTC · Feb 20, 2022MalwareCVE-2021-4422860
New Charges, Sentencing in Satori IoT Botnet ConspiracyKrebs on Security·Jun 26, 01:04 UTC · Jun 26, 2020Malware30
European police target anti-malware detection services and their customersSecurity Affairs·Jun 15, 06:57 UTC · Jun 15, 2017Malware30
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag ImagesThe Hacker News·Jul 19, 18:14 UTC · Jul 19, 2026Malware42
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python InfostealerThe Hacker News·Jul 1, 10:25 UTC · Jul 1, 2026Malware142
N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, RustThe Hacker News·Apr 8, 07:47 UTC · Apr 8, 2026Malware142
Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HRHelp Net Security·Mar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-21262CVE-2026-26127160
North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for CrossThe Hacker News·Mar 3, 06:20 UTC · Mar 3, 2026Malware42
DPRK Operatives Impersonate Professionals on LinkedIn to Infiltrate CompaniesThe Hacker News·Feb 11, 14:43 UTC · Feb 11, 2026Malware42
North Korean Hackers Turn JSON Services into Covert Malware Delivery ChannelsThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2025Malware42
Week in review: Actively exploited Windows SMB flaw, trusted OAuth apps turned into cloud backdoorsHelp Net Security·Oct 26, 00:00 UTC · Oct 26, 2025Malware in the wildCVE-2025-59287CVE-2025-61932CVE-2025-54236+2 CVEs60
BeaverTail and OtterCookie evolve with a new Javascript moduleCisco Talos·Oct 16, 10:00 UTC · Oct 16, 2025Malware130
North Korea-linked actors spread XORIndex malware via 67 malicious npm packagesSecurity Affairs·Jul 15, 09:48 UTC · Jul 15, 2025Malware55
Developers Beware: Lazarus Group Uses Fake Coding Tests to Spread MalwareThe Hacker News·Apr 10, 12:17 UTC · Apr 10, 2025Malware42
Phishers abuse CrowdStrike brand targeting job seekers with cryptominerSecurity Affairs·Jan 10, 11:29 UTC · Jan 10, 2025Malware30
Report claims that Serbian authorities abused Cellebrite tool to install NoviSpy spywareSecurity Affairs·Dec 16, 20:47 UTC · Dec 16, 2024MalwareCVE-2024-4304760
North Korean Hackers Target Crypto Firms with Hidden Risk Malware on macOSThe Hacker News·Nov 8, 04:08 UTC · Nov 8, 2024Malware42
BeaverTail Malware Resurfaces in Malicious npm Packages Targeting DevelopersThe Hacker News·Oct 28, 17:12 UTC · Oct 28, 2024Malware42
North Korean Hackers Target Developers with Malicious npm PackagesThe Hacker News·Aug 31, 15:12 UTC · Aug 31, 2024Malware42
North Korea-Linked Malware Targets Developers on Windows, Linux, and macOSThe Hacker News·Aug 1, 09:30 UTC · Aug 1, 2024Malware42
Week in review: Backdoor found in XZ utilities, weaponized iMessages, Exchange servers at riskHelp Net Security·Mar 31, 00:00 UTC · Mar 31, 2024Malware in the wildCVE-2024-3094CVE-2023-48022CVE-2023-2495560
Russian hackers infiltrated Ukrainian telecom giant months before cyberattackThe Record·Jan 4, 16:13 UTC · Jan 4, 2024Malware42
Overcoming the cybersecurity talent shortage with upskilling initiativesHelp Net Security·Dec 5, 09:04 UTC · Dec 5, 2023Malware55
Why are computer security guidelines so confusing?Help Net Security·Jul 27, 00:00 UTC · Jul 27, 2023Malware30
Emerging from uncertainty, DOD cyber war college looks to navigate the futureThe Record·Dec 13, 00:00 UTC · Dec 13, 2022Malware30
NFT creators tricked into installing malware in highly targeted attackThe Record·Dec 10, 00:00 UTC · Dec 10, 2022Malware30