Mobile Malware Evolution: An Overview, Part 4Kaspersky Securelist·May 22, 12:13 UTC · May 22, 2011Malware30
New Russian Campaign Uses Fake Webex and Zoom Installers to Deploy Starland RATSecurity Affairs·Jul 17, 09:08 UTC · Jul 17, 2026Malware30
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 FilesThe Hacker News·Jul 17, 08:56 UTC · Jul 17, 2026Malware130
AI-Generated Malware Powers New Armored Likho APT CampaignSecurity Affairs·Jul 7, 08:28 UTC · Jul 7, 2026Malware42
Armored Likho Targets Government Agencies, Power Sector with BusySnake StealerThe Hacker News·Jul 3, 14:36 UTC · Jul 3, 2026MalwareCVE-2025-949147
macOS.Gaslight: North Korea-Linked Malware That Tries to Gaslight the AnalystSecurity Affairs·Jun 26, 07:18 UTC · Jun 26, 2026Malware42
North Korean Hackers Are Turning Developer Tools Into Malware Delivery ChannelsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Malware42
IoT Botnet C0XMO Adds CompetitorSecurity Affairs·Jun 14, 11:48 UTC · Jun 14, 2026MalwareCVE-2021-27137CVE-2015-2051CVE-2022-35914+2 CVEs47
ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New StoriesThe Hacker News·Jun 4, 14:00 UTC · Jun 4, 2026Malware in the wildCVE-2026-20230160
Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential StealerThe Hacker News·May 25, 09:00 UTC · May 25, 2026Malware142
TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIOThe Hacker News·May 25, 05:59 UTC · May 25, 2026Malware42
Malicious Hugging Face Repository Typosquats OpenAIInfosecurity Magazine·May 12, 09:30 UTC · May 12, 2026Malware42
PCPJack Credential Stealer Exploits 5 CVEs to Spread WormThe Hacker News·May 7, 17:45 UTC · May 7, 2026MalwareCVE-2025-55182CVE-2025-29927CVE-2026-1357+2 CVEs35
UNC6692 Impersonates IT Help Desk via Microsoft Teams to Deploy SNOW MalwareThe Hacker News·Apr 24, 09:30 UTC · Apr 24, 2026Malware55
Persistent backdoors injected on Adobe Commerce via new CosmicSting attackSansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Malware in the wildCVE-2024-34102CVE-2024-2961CVE-2026-7565060
DPRK-Linked Hackers Use GitHub as C2 in MultiThe Hacker News·Apr 9, 04:56 UTC · Apr 9, 2026Malware142
ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool InstallersThe Hacker News·Mar 31, 11:33 UTC · Mar 31, 2026Malware42
Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm PackagesThe Hacker News·Mar 23, 07:53 UTC · Mar 23, 2026Malware42
Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT MalwareThe Hacker News·Feb 6, 08:40 UTC · Feb 6, 2026Malware42
Hackers Exploit c-ares DLL Side-Loading to Bypass Security and Deploy MalwareThe Hacker News·Jan 20, 12:28 UTC · Jan 20, 2026Malware42
WhatsApp Worm Spreads Astaroth Banking Trojan Across Brazil via Contact AutoThe Hacker News·Jan 9, 05:33 UTC · Jan 9, 2026Malware30
Cracked Software and YouTube Videos Spread CountLoader and GachiLoader MalwareThe Hacker News·Dec 20, 13:28 UTC · Dec 20, 2025Malware30
Russian-linked Malware Campaign Hides in Blender 3D FilesInfosecurity Magazine·Nov 24, 14:00 UTC · Nov 24, 2025Malware30
Phishing Campaign Evolves into PureRAT DeploymentInfosecurity Magazine·Sep 25, 16:00 UTC · Sep 25, 2025Malware30
Chainguard Libraries for JavaScript provides developers with malware-free dependenciesHelp Net Security·Sep 25, 00:00 UTC · Sep 25, 2025Malware42
Malicious Code Adapts to Target Multiple CPU ArchitecturesRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Malware30
PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud EnvironmentsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025Malware142
New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions GloballyThe Hacker News·Jun 9, 16:37 UTC · Jun 9, 2025Malware42
Malicious Machine Learning Model Attack Discovered on PyPIInfosecurity Magazine·May 27, 14:00 UTC · May 27, 2025Malware42
Malicious PyPI Packages Exploit Instagram and TikTok APIs to Validate User AccountsThe Hacker News·May 20, 05:49 UTC · May 20, 2025Malware142
Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ TimesThe Hacker News·May 7, 07:37 UTC · May 7, 2025Malware42
SilentCryptoMiner distributed as a bypass toolKaspersky Securelist·Mar 5, 10:22 UTC · Mar 5, 2025Malware30
Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music DownloadsThe Hacker News·Feb 27, 07:04 UTC · Feb 27, 2025Malware42
Fake GitHub projects distribute stealers in GitVenom campaignKaspersky Securelist·Feb 25, 06:21 UTC · Feb 25, 2025Malware42
Russian Cyber Spies Target Organizations with Custom MalwareInfosecurity Magazine·Nov 22, 13:00 UTC · Nov 22, 2024MalwareCVE-2024-2369247
Writing a BugSleep C2 server and detecting its traffic with SnortCisco Talos·Oct 30, 10:00 UTC · Oct 30, 2024Malware130
China-Linked CeranaKeeper Targeting Southeast Asia with Data ExfiltrationThe Hacker News·Oct 2, 15:21 UTC · Oct 2, 2024Malware42
Rogue PyPI Library Solana Users, Steals Blockchain Wallet KeysThe Hacker News·Aug 11, 10:01 UTC · Aug 11, 2024Malware42
North Korea-Linked Malware Targets Developers on Windows, Linux, and macOSThe Hacker News·Aug 1, 09:30 UTC · Aug 1, 2024Malware42