OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor AppsThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Malware30
LabubaRAT malware infiltrates Windows systems while posing as NVIDIA softwareHelp Net Security·Jul 15, 00:00 UTC · Jul 15, 2026Malware30
LabubaRAT Masquerades as NVIDIA Software to Control Windows HostsThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Malware30
Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain AttackThe Hacker News·Jul 10, 17:27 UTC · Jul 10, 2026Malware42
AI-Generated Malware Powers New Armored Likho APT CampaignSecurity Affairs·Jul 7, 08:28 UTC · Jul 7, 2026Malware42
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and MoreThe Hacker News·Jun 29, 14:42 UTC · Jun 29, 2026Malware in the wildCVE-2026-43503CVE-2026-12569CVE-2026-47729+19 CVEs60
Chinese APT CL-STA-1062 Expands Attacks on Southeast Asian Critical Infrastructure With Custom MalwareSecurity Affairs·Jun 26, 17:16 UTC · Jun 26, 2026Malware55
Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia CampaignThe Hacker News·Jun 26, 16:21 UTC · Jun 26, 2026Malware55
New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT CampaignsThe Hacker News·Jun 25, 08:54 UTC · Jun 25, 2026Malware42
145 Mastra npm Packages Compromised via Hijacked Contributor AccountThe Hacker News·Jun 22, 05:41 UTC · Jun 22, 2026Malware42
Tor-Based Clipper Malware Targets Wallet Seed PhrasesSecurity Affairs·Jun 18, 18:32 UTC · Jun 18, 2026Malware42
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update LuresThe Hacker News·Jun 17, 08:52 UTC · Jun 17, 2026Malware42
Hades PyPI Attack: 19 Packages Poisoned to AutoThe Hacker News·Jun 9, 10:34 UTC · Jun 9, 2026Malware142
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain ChaosThe Hacker News·May 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333CVE-2026-41091CVE-2026-45498+31 CVEs60
Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto FirmsThe Hacker News·May 25, 11:48 UTC · May 25, 2026Malware30
ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New StoriesThe Hacker News·May 24, 08:14 UTC · May 24, 2026MalwareCVE-2026-4579360
Turla Turns Kazuar Backdoor Into Modular P2P Botnet for Persistent AccessThe Hacker News·May 17, 07:19 UTC · May 17, 2026Malware42
Mustang Panda Linked to FDMTP Backdoor in AsiaInfosecurity Magazine·May 14, 15:00 UTC · May 14, 2026Malware42
Fake Claude Code Page Pushes PowerShell Stealer at DevsInfosecurity Magazine·May 11, 14:00 UTC · May 11, 2026Malware130
Quasar Linux RAT (QLNX): A Fileless Linux Implant Built for Stealth and PersistenceSecurity Affairs·May 9, 13:11 UTC · May 9, 2026Malware42
Iran Expands Handala Brand to Physical ThreatsRecorded Future·Apr 26, 00:00 UTC · Apr 26, 2026Malware55
ThreatsDay Bulletin: Hybrid P2P Botnet, 13-YearThe Hacker News·Apr 9, 16:23 UTC · Apr 9, 2026MalwareCVE-2024-32114CVE-2026-34197CVE-2022-41678160
An analysis of CrystalX commercial RAT with prankware featuresKaspersky Securelist·Apr 1, 05:33 UTC · Apr 1, 2026Malware42
Friday Squid Blogging: Bioluminescent Bacteria in SquidSchneier on Security·Mar 28, 00:45 UTC · Mar 28, 2026Malware30
Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm PackagesThe Hacker News·Mar 23, 07:53 UTC · Mar 23, 2026Malware42
⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & MoreThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-3909CVE-2026-3910CVE-2026-3913+40 CVEs260
14,000 Routers Are Infected By Malware That'S Highly Resistant To TakedownsArs Technica · Security·Mar 11, 21:27 UTC · Mar 11, 2026Malware55
Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data TheftThe Hacker News·Mar 9, 14:35 UTC · Mar 9, 2026Malware42
Aeternum C2 Botnet Stores Encrypted Commands on Polygon Blockchain to Evade TakedownThe Hacker News·Feb 28, 09:34 UTC · Feb 28, 2026Malware30
Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware StagingThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Malware30
CrashFix Chrome Extension Delivers ModeloRAT Using ClickFixThe Hacker News·Feb 6, 05:45 UTC · Feb 6, 2026Malware42
Google Disrupts IPIDEA — One of the World’s Largest Residential Proxy NetworksThe Hacker News·Jan 31, 06:34 UTC · Jan 31, 2026Malware42
Google targets IPIDEA in crackdown on global residential proxy networksSecurity Affairs·Jan 29, 15:16 UTC · Jan 29, 2026Malware42
ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit — and 20 More StoriesThe Hacker News·Dec 18, 12:15 UTC · Dec 18, 2025MalwareCVE-2024-3721CVE-2025-5518260
North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT MalwareThe Hacker News·Dec 10, 07:33 UTC · Dec 10, 2025MalwareCVE-2025-5518260
Konni Hackers Turn Google’s Find Hub into a Remote DataThe Hacker News·Nov 17, 14:27 UTC · Nov 17, 2025Malware42
WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest BanksThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2025Malware42