Week in review: Backdoor found in XZ utilities, weaponized iMessages, Exchange servers at riskHelp Net Security·Mar 31, 00:00 UTC · Mar 31, 2024Malware in the wildCVE-2024-3094CVE-2023-48022CVE-2023-2495560
FakeWallet cryptostealer propagating via iOS App Store applicationsKaspersky Securelist·Apr 20, 09:22 UTC · Apr 20, 2026Malware30
Hackers Exploit WordPress Sites to Power NextThe Hacker News·Oct 10, 06:51 UTC · Oct 10, 2025Malware30
Dissecting the Chrome Extension Facebook malwareKaspersky Securelist·Aug 31, 11:00 UTC · Aug 31, 2017Malware30
QSnatch malware already infected thousands of QNAP NAS devicesSecurity Affairs·Nov 4, 08:32 UTC · Nov 4, 2019Malware42
YODA Tool Found ~47,000 Malicious WordPress Plugins Installed in Over 24,000 SitesThe Hacker News·Jun 2, 03:39 UTC · Jun 2, 2022Malware30
CosmicStrand, a sophisticated UEFI firmware rootkit linked to ChinaSecurity Affairs·Jul 31, 09:07 UTC · Jul 31, 2022Malware30
FIN7 Group Uses JavaScript and Stealer DLL Variant in New AttacksCisco Talos·Sep 27, 17:38 UTC · Sep 27, 2017Malware30
Trust Wallet confirms second Shai-Hulud supplySecurity Affairs·Jan 1, 16:16 UTC · Jan 1, 2026Malware42
Nuclear Bot source code leaked online, a new threat will rapidly spread in the wildSecurity Affairs·Mar 30, 06:35 UTC · Mar 30, 2017Malware30
Supply chain attack targets npm, +2 Billion weekly npm downloads exposedSecurity Affairs·Sep 9, 18:26 UTC · Sep 9, 2025Malware42
Android Flaw Lets Hackers Inject Malware Into Apps Without Altering SignaturesThe Hacker News·Dec 9, 09:30 UTC · Dec 9, 2017MalwareCVE-2017-1315660
Hackers deploy fake SonicWall VPN App to steal corporate credentialsSecurity Affairs·Jun 25, 18:09 UTC · Jun 25, 2025Malware30
Crooks expand the original Mirai botnet code base with new capabilities and improvementsSecurity Affairs·Jun 8, 21:27 UTC · Jun 8, 2018Malware42
Over 950K weekly downloads at risk in ongoing supply chain attack on Gluestack packagesSecurity Affairs·Jun 8, 13:35 UTC · Jun 8, 2025Malware42
Magecart Attackers Target Retail Brands Under LockdownInfosecurity Magazine·Jun 16, 10:20 UTC · Jun 16, 2020Malware42
Sign1 malware campaign already infected 39,000 WordPress sitesSecurity Affairs·Mar 23, 13:00 UTC · Mar 23, 2024Malware30
Rethinking MDR as Attackers and Defenders Embrace AIThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Malware42
Ultralytics AI Library Compromised: Cryptocurrency Miner Found in PyPI VersionsThe Hacker News·Dec 7, 10:54 UTC · Dec 7, 2024Malware42
Google Play Apps Infected with Malicious IFramesPalo Alto Unit 42·Jan 28, 20:34 UTC · Jan 28, 2022Malware30
TeaBot Banking Trojan Activity on the Rise, Zscaler ObservesInfosecurity Magazine·May 28, 13:45 UTC · May 28, 2024Malware30
Proton malware spreading through supply-chain attack, victims should wipe their MacsSecurity Affairs·Oct 21, 17:32 UTC · Oct 21, 2017Malware42
News Flodrix botnet targets vulnerable Langflow serversSecurity Affairs·Jun 18, 10:43 UTC · Jun 18, 2025Malware in the wildCVE-2025-324860
ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks — and 20 More StoriesThe Hacker News·Nov 27, 10:03 UTC · Nov 27, 2025MalwareCVE-2009-2765CVE-2020-25506CVE-2022-37055+6 CVEs47
Long-existing Bandook RAT targets Windows machinesSecurity Affairs·Jan 8, 08:40 UTC · Jan 8, 2024Malware30
New Cryptocurrency Mining Malware Infected Over 500,000 PCs in Just Few HoursThe Hacker News·Mar 8, 19:13 UTC · Mar 8, 2018Malware30
Malware Injected into 7 npm Packages After Maintainer Tokens Stolen in Phishing AttackThe Hacker News·Jul 23, 10:41 UTC · Jul 23, 2025Malware42
GuLoader Malware Utilizing New Techniques to Evade Security SoftwareThe Hacker News·Dec 29, 06:13 UTC · Dec 29, 2022Malware30
Two Compromised joyfill npm Packages Run RAT When Imported Into Node.jsThe Hacker News·Aug 4, 05:21 UTC · Aug 4, 2026Malware142
Researchers Uncover Python Package Targeting Crypto Wallets with Malicious CodeThe Hacker News·Oct 31, 10:10 UTC · Oct 31, 2024Malware30
Sysrv-K, a new variant of the sysrv botnet includes new exploitsSecurity Affairs·May 15, 11:25 UTC · May 15, 2022MalwareCVE-2022-2294760
The Curious Case of Notepad and Chthonic: Exposing a Malicious InfrastructurePalo Alto Unit 42·Aug 15, 12:00 UTC · Aug 15, 2017Malware30
Mirai-like botnet is exploiting recently disclosed Zyxel NAS flawSecurity Affairs·Jun 25, 16:52 UTC · Jun 25, 2024Malware in the wildCVE-2024-29973CVE-2023-2799260
The Story Behind Syrian Malware, .NET Trojans and Social EngineeringKaspersky Securelist·Apr 3, 18:05 UTC · Apr 3, 2014Malware30