Suspected Russian hackers deploy CANFAIL malware against UkraineSecurity Affairs·Feb 14, 11:05 UTC · Feb 14, 2026Malware42
Unusually patient suspected Russian hackers pose as State Department in ‘sophisticated’ attacks on researchersCyberScoop·Jun 18, 17:00 UTC · Jun 18, 2025Malware30
SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkitHelp Net Security·Aug 5, 15:29 UTC · Aug 5, 2025MalwareCVE-2021-20035CVE-2021-20039CVE-2024-38475+1 CVEs60
U.S. adversaries increasingly turning to cybercriminals and their malware for helpCyberScoop·Feb 12, 00:01 UTC · Feb 12, 2025Malware in the wild60
Google uncovers malware using LLMs to operate and evade detectionHelp Net Security·Nov 5, 00:00 UTC · Nov 5, 2025Malware142
Russian Coldriver Hackers Deploy New ‘NoRobot’ MalwareInfosecurity Magazine·Oct 21, 11:02 UTC · Oct 21, 2025Malware42
Google finds custom backdoor being installed on SonicWall network devicesArs Technica · Security·Jul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2021-20038CVE-2024-38475CVE-2021-20035+2 CVEs60
Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage AttacksThe Hacker News·Jun 26, 07:15 UTC · Jun 26, 2026MalwareCVE-2025-808847
Russia-linked COLDRIVER speeds up malware evolution after LOSTKEYS exposureSecurity Affairs·Oct 22, 06:06 UTC · Oct 22, 2025Malware42
Week in review: Infostealer dropped via FortiClient EMS flaw, exploited Trend Micro Apex One flawHelp Net Security·May 31, 00:00 UTC · May 31, 2026Malware in the wildCVE-2026-45659CVE-2026-34926CVE-2026-3561660
Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from BlockchainThe Hacker News·Aug 6, 10:08 UTC · Aug 6, 2026Malware42
Vietnam-Nexus Hackers Distribute Malware Via Fake AI Video GeneratorsInfosecurity Magazine·May 28, 10:00 UTC · May 28, 2025Malware42
Google Identifies Three New Russian Malware Families Created by COLDRIVER HackersThe Hacker News·Oct 21, 13:29 UTC · Oct 21, 2025Malware42
North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart ContractsThe Hacker News·Oct 17, 04:33 UTC · Oct 17, 2025Malware42
BadAudio malware: How APT24 scaled its cyberespionage through supply chain attacksSecurity Affairs·Nov 22, 17:11 UTC · Nov 22, 2025Malware42
SonicWall adds rootkit removal capabilities to the SMA 100 seriesHelp Net Security·Oct 9, 13:10 UTC · Oct 9, 2025Malware in the wildCVE-2024-38475CVE-2025-4059960
Vercel's security breach started with malware disguised as Roblox cheatsCyberScoop·Apr 20, 20:24 UTC · Apr 20, 2026Malware in the wild60
Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress SitesThe Hacker News·Oct 17, 04:33 UTC · Oct 17, 2025Malware55
Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and RootkitsThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025MalwareCVE-2025-2159060
New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in RussiaThe Hacker News·Sep 27, 12:13 UTC · Sep 27, 2025Malware42
Nation-state hackers deliver malware from “bulletproof” blockchainsArs Technica · Security·Oct 15, 00:00 UTC · Oct 15, 2025Malware42
Intellexa Leaks Reveal Zero-Days and Ads-Based Vector for Predator Spyware DeliveryThe Hacker News·Dec 9, 07:34 UTC · Dec 9, 2025MalwareCVE-2025-48543CVE-2025-6554CVE-2023-41993+12 CVEs160
Iranian hackers targeted Jewish figure with malware attached to podcast invite, researchers sayThe Record·Aug 20, 00:39 UTC · Aug 20, 2024Malware42
Google Disrupts IPIDEA — One of the World’s Largest Residential Proxy NetworksThe Hacker News·Jan 31, 06:34 UTC · Jan 31, 2026Malware42
Hackers Exploit Signal's Linked Devices Feature to Hijack Accounts via Malicious QR CodesThe Hacker News·Nov 25, 06:27 UTC · Nov 25, 2025Malware42
UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology SectorsThe Hacker News·Sep 25, 15:04 UTC · Sep 25, 2025MalwareCVE-2023-46805CVE-2024-2188760
Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE MalwareThe Hacker News·Apr 7, 06:39 UTC · Apr 7, 2025Malware in the wildCVE-2025-22457CVE-2024-38657CVE-2025-22467+2 CVEs60
FBI Seizes NetNut Proxy Platform, Popa BotnetKrebs on Security·Jul 2, 20:10 UTC · Jul 2, 2026Malware30
Intellexa remotely accessed Predator spyware customer systems, investigation findsCyberScoop·Dec 4, 22:24 UTC · Dec 4, 2025Malware in the wild60
SonicWall fixed critical flaw in SMA 100 devices exploited in Overstep malware attacksSecurity Affairs·Jul 24, 13:01 UTC · Jul 24, 2025MalwareCVE-2025-40599CVE-2024-3847560
Chinese Hackers Use ‘BRICKSTORM’ Backdoor to Breach US FirmsInfosecurity Magazine·Sep 25, 12:30 UTC · Sep 25, 2025Malware55
Google spots tailored backdoor malware aimed at SonicWall appliancesThe Record·Jul 16, 15:48 UTC · Jul 16, 2025MalwareCVE-2024-38475CVE-2021-20038CVE-2021-20035+2 CVEs60
Google Disrupts ‘Prolific’ and ‘Elusive’ ChinaInfosecurity Magazine·Feb 26, 12:09 UTC · Feb 26, 2026Malware42
Lazarus Group Targets Job Seekers With ClickFix Tactic to Deploy GolangGhost MalwareThe Hacker News·Apr 3, 17:27 UTC · Apr 3, 2025Malware42
Predator Spyware Maker Intellexa Evades SanctionsInfosecurity Magazine·Dec 5, 09:15 UTC · Dec 5, 2025Malware55
Chinese APT41 Exploits Google Calendar for Malware Command-andThe Hacker News·May 29, 15:26 UTC · May 29, 2025Malware42
Google warns of Brickstorm backdoor targeting U.S. legal and tech sectorsSecurity Affairs·Sep 26, 07:04 UTC · Sep 26, 2025Malware55
CrowdStrike disrupts Glassworm botnet that preyed on openCyberScoop·May 27, 14:16 UTC · May 27, 2026Malware in the wild160
BRICKSTORM backdoor exposed: CISA warns of advanced ChinaSecurity Affairs·Dec 5, 11:03 UTC · Dec 5, 2025Malware55