Search: “web shells”

548 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 549 Vulnerability 513 Ransomware 366 Exploit / PoC 352 Threat actor 212 Data breach 107 Phishing & fraud 40 Policy & legal 27 Advisory 16 Industry 13 AI safety & security 9 Tools 7 Research 6 AI tools & infra 4

SeverityAll critical 1001 high 847 medium 293 low 60 info 25

BRICKSTORM backdoor exposed: CISA warns of advanced China

Security AffairsDec 5, 11:03 UTC · Dec 5, 2025Malware

55

Google warns of Brickstorm backdoor targeting U.S. legal and tech sectors

Security AffairsSep 26, 07:04 UTC · Sep 26, 2025Malware

55

Over 16,500 Sites Hacked to Distribute Malware via Web Redirect Service

The Hacker NewsJun 3, 09:27 UTC · Jun 3, 2022Malware

42

Is ICEMAN behind the malware-based attack on Crystal Finance Millennium?

Security AffairsJan 31, 18:05 UTC · Jan 31, 2018Malware

42

UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors

The Hacker NewsSep 25, 15:04 UTC · Sep 25, 2025Malware CVE-2023-46805 CVE-2024-21887

60

Several Malware Families Targeting IIS Web Servers With Malicious Modules

The Hacker NewsAug 6, 05:11 UTC · Aug 6, 2021Malware

42

New Linux Malware 'sedexp' Hides Credit Card Skimmers Using Udev Rules

The Hacker NewsAug 27, 05:33 UTC · Aug 27, 2024Malware

42

FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux

The Hacker NewsFeb 28, 04:32 UTC · Feb 28, 2025Malware1

42

Owowa: the add-on that turns your OWA into a credential stealer and remote access panel

Kaspersky SecurelistDec 14, 10:00 UTC · Dec 14, 2021Malware

30

⚡ Weekly Recap: USB Malware, React2Shell, WhatsApp Worms, AI IDE Bugs & More

The Hacker NewsDec 9, 04:05 UTC · Dec 9, 2025Malware CVE-2025-55182 CVE-2025-6389 CVE-2025-66516+19 CVEs

60

New Cross-Platform Malware 'Noodle RAT' Targets Windows and Linux Systems

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2024Malware

42

ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories

The Hacker NewsApr 2, 15:07 UTC · Apr 2, 2026Malware CVE-2026-2699 CVE-2026-2701

60

AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials

The Hacker NewsMar 21, 12:48 UTC · Mar 21, 2024Malware CVE-2021-41773 CVE-2017-9841 CVE-2018-151331

60

Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems

The Hacker NewsAug 19, 17:37 UTC · Aug 19, 2025Malware CVE-2023-46604

47

Widespread JBoss Backdoors a Major Threat

Cisco TalosApr 15, 15:29 UTC · Apr 15, 2016Malware

42

⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-20309+23 CVEs

60

Androxgh0st malware hackers creating large botnet, CISA and FBI warn

The RecordJan 16, 22:19 UTC · Jan 16, 2024Malware in the wildCVE-2018-15133

60

New Version of Prometei Botnet Infects Over 10,000 Systems Worldwide

The Hacker NewsMar 11, 06:27 UTC · Mar 11, 2023Malware

30

New PowerExchange Backdoor linked to an Iranian APT group

Security AffairsMay 26, 21:44 UTC · May 26, 2023Malware

42

New Golang-based Linux Malware Targeting eCommerce Websites

The Hacker NewsNov 22, 12:10 UTC · Nov 22, 2021Malware

42

Free proxy service runs on top of Linux Ngioweb Botnet

Security AffairsJun 24, 14:29 UTC · Jun 24, 2019Malware

30

Fake UpdraftPlus WordPress Plugins used to backdoor sites

Security AffairsOct 20, 19:28 UTC · Oct 20, 2019Malware

42

YODA Tool Found ~47,000 Malicious WordPress Plugins Installed in Over 24,000 Sites

The Hacker NewsJun 2, 03:39 UTC · Jun 2, 2022Malware

30

New Stealthy Rootkit Infiltrated Networks of High

The Hacker NewsMay 7, 12:56 UTC · May 7, 2021Malware

42

Year in Malware 2023: Recapping the major cybersecurity stories of the past year

Cisco TalosDec 19, 13:00 UTC · Dec 19, 2023Malware1

42

Chinese 'Gallium' Hackers Using New PingPull Malware in Cyberespionage Attacks

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2022Malware

42

Mirai Botnet targeting OFBiz Servers Vulnerable to Directory Traversal

The Hacker NewsAug 2, 17:14 UTC · Aug 2, 2024Malware in the wildCVE-2024-32213

60

Feds Warn of AndroxGh0st Botnet Targeting AWS, Azure, and Office 365 Credentials

The Hacker NewsJan 18, 08:54 UTC · Jan 18, 2024Malware CVE-2017-9841 CVE-2021-41773 CVE-2018-15133

35

Armenian Entities Hit by New Version of OxtaRAT Spying Tool

The Hacker NewsFeb 17, 12:47 UTC · Feb 17, 2023Malware

42

Google Uncovers PROMPTFLUX Malware That Uses Gemini AI to Rewrite Its Code Hourly

The Hacker NewsNov 6, 04:37 UTC · Nov 6, 2025Malware

42

Days before a report, Chinese hackers removed malware from infected networks

The RecordDec 12, 00:00 UTC · Dec 12, 2022Malware

55

Earth Lusca expands its arsenal with SprySOCKS Linux malware

Security AffairsSep 19, 07:52 UTC · Sep 19, 2023Malware CVE-2022-40684 CVE-2022-39952 CVE-2021-22205+6 CVEs1

60

New "Cavalry Werewolf" Attack Hits Russian Agencies with FoalShell and StallionRAT

The Hacker NewsOct 3, 10:30 UTC · Oct 3, 2025Malware

42

The SessionManager IIS backdoor: a possibly overlooked GELSEMIUM artefact

Kaspersky SecurelistJun 30, 08:00 UTC · Jun 30, 2022Malware

42

Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor

The Hacker NewsMay 21, 16:35 UTC · May 21, 2026Malware CVE-2021-268551

47

ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year

The Hacker NewsApr 9, 16:23 UTC · Apr 9, 2026Malware CVE-2024-32114 CVE-2026-34197 CVE-2022-416781

60

OpenAI Assistants API Exploited in 'SesameOp' Backdoor

Infosecurity MagazineNov 4, 15:00 UTC · Nov 4, 2025Malware

42

New EAGERBEE Variant Targets ISPs and Governments with Advanced Backdoor Capabilities

The Hacker NewsJan 7, 12:33 UTC · Jan 7, 2025Malware CVE-2021-26855

47

Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026Malware CVE-2026-10795

47

⚡ Weekly Recap: Nation-State Hacks, Spyware Alerts, Deepfake Malware, Supply Chain Backdoors

The Hacker NewsMay 6, 05:03 UTC · May 6, 2025Malware CVE-2025-3928 CVE-2025-1976 CVE-2025-46271+33 CVEs

60