React2Shell under attack: RondoDox Botnet spreads miners and malwareSecurity Affairs·Jan 1, 14:31 UTC · Jan 1, 2026MalwareCVE-2025-55182CVE-2024-3721CVE-2024-1285660
RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web ServersThe Hacker News·Jan 1, 09:19 UTC · Jan 1, 2026MalwareCVE-2025-55182CVE-2023-1389CVE-2025-2489360
React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple SectorsThe Hacker News·Dec 11, 04:19 UTC · Dec 11, 2025MalwareCVE-2025-5518260
NetSupport RAT and RMS in malicious emailsKaspersky Securelist·Dec 2, 12:04 UTC · Dec 2, 2024Malware30
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag ImagesThe Hacker News·Jul 19, 18:14 UTC · Jul 19, 2026Malware42
⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and MoreThe Hacker News·May 11, 12:36 UTC · May 11, 2026Malware in the wildCVE-2026-6973CVE-2026-030060
Vercel's security breach started with malware disguised as Roblox cheatsCyberScoop·Apr 20, 20:24 UTC · Apr 20, 2026Malware in the wild60
RondoDox botnet expands arsenal targeting 174 flaws, and hits 15,000 daily exploit attemptsSecurity Affairs·Mar 17, 15:02 UTC · Mar 17, 2026Malware in the wildCVE-2023-1389CVE-2024-3721CVE-2024-12856+2 CVEs60
Aeternum C2 Botnet Stores Encrypted Commands on Polygon Blockchain to Evade TakedownThe Hacker News·Feb 28, 09:34 UTC · Feb 28, 2026Malware30
Pompelmi: Open-source secure file upload scanning for Node.jsHelp Net Security·Feb 2, 00:00 UTC · Feb 2, 2026Malware30
New EtherRAT backdoor surfaces in React2Shell attacks tied to North KoreaSecurity Affairs·Dec 10, 14:45 UTC · Dec 10, 2025MalwareCVE-2025-5518260
Over 67,000 Fake npm Packages Flood Registry in WormThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2025Malware42
⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and MoreThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462CVE-2025-32463CVE-2025-20309+23 CVEs60
⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and MoreThe Hacker News·May 7, 10:33 UTC · May 7, 2025MalwareCVE-2025-29927CVE-2025-23120CVE-2024-56346+13 CVEs60