U.S. adversaries increasingly turning to cybercriminals and their malware for helpCyberScoop·Feb 12, 00:01 UTC · Feb 12, 2025Malware in the wild60
Google uncovers malware using LLMs to operate and evade detectionHelp Net Security·Nov 5, 00:00 UTC · Nov 5, 2025Malware142
Unusually patient suspected Russian hackers pose as State Department in ‘sophisticated’ attacks on researchersCyberScoop·Jun 18, 17:00 UTC · Jun 18, 2025Malware30
SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkitHelp Net Security·Aug 5, 15:29 UTC · Aug 5, 2025MalwareCVE-2021-20035CVE-2021-20039CVE-2024-38475+1 CVEs60
Suspected Russian hackers deploy CANFAIL malware against UkraineSecurity Affairs·Feb 14, 11:05 UTC · Feb 14, 2026Malware42
Google, Mandiant expose malware and zeroSecurity Affairs·Oct 13, 08:35 UTC · Oct 13, 2025Malware in the wildCVE-2025-6188260
Google finds custom backdoor being installed on SonicWall network devicesArs Technica · Security·Jul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2021-20038CVE-2024-38475CVE-2021-20035+2 CVEs60
Russian Coldriver Hackers Deploy New ‘NoRobot’ MalwareInfosecurity Magazine·Oct 21, 11:02 UTC · Oct 21, 2025Malware42
Russia-linked COLDRIVER speeds up malware evolution after LOSTKEYS exposureSecurity Affairs·Oct 22, 06:06 UTC · Oct 22, 2025Malware42
Google Ties Suspected Russian Actor to CANFAIL Malware Attacks on Ukrainian OrgsThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Malware30
Hackers Exploit Signal's Linked Devices Feature to Hijack Accounts via Malicious QR CodesThe Hacker News·Nov 25, 06:27 UTC · Nov 25, 2025Malware42
Google Identifies Three New Russian Malware Families Created by COLDRIVER HackersThe Hacker News·Oct 21, 13:29 UTC · Oct 21, 2025Malware42
Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and RootkitsThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025MalwareCVE-2025-2159060
Google Uncovers PROMPTFLUX Malware That Uses Gemini AI to Rewrite Its Code HourlyThe Hacker News·Nov 6, 04:37 UTC · Nov 6, 2025Malware42
Google Disrupts IPIDEA — One of the World’s Largest Residential Proxy NetworksThe Hacker News·Jan 31, 06:34 UTC · Jan 31, 2026Malware42
Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress SitesThe Hacker News·Oct 17, 04:33 UTC · Oct 17, 2025Malware55
FBI Seizes NetNut Proxy Platform, Popa BotnetKrebs on Security·Jul 2, 20:10 UTC · Jul 2, 2026Malware30
Vercel's security breach started with malware disguised as Roblox cheatsCyberScoop·Apr 20, 20:24 UTC · Apr 20, 2026Malware in the wild60
Intellexa remotely accessed Predator spyware customer systems, investigation findsCyberScoop·Dec 4, 22:24 UTC · Dec 4, 2025Malware in the wild60
Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE MalwareThe Hacker News·Apr 7, 06:39 UTC · Apr 7, 2025Malware in the wildCVE-2025-22457CVE-2024-38657CVE-2025-22467+2 CVEs60
BadAudio malware: How APT24 scaled its cyberespionage through supply chain attacksSecurity Affairs·Nov 22, 17:11 UTC · Nov 22, 2025Malware42
Intellexa Leaks Reveal Zero-Days and Ads-Based Vector for Predator Spyware DeliveryThe Hacker News·Dec 9, 07:34 UTC · Dec 9, 2025MalwareCVE-2025-48543CVE-2025-6554CVE-2023-41993+12 CVEs160
Lazarus Group Targets Job Seekers With ClickFix Tactic to Deploy GolangGhost MalwareThe Hacker News·Apr 3, 17:27 UTC · Apr 3, 2025Malware42
Chinese Hackers Use ‘BRICKSTORM’ Backdoor to Breach US FirmsInfosecurity Magazine·Sep 25, 12:30 UTC · Sep 25, 2025Malware55
Google spots tailored backdoor malware aimed at SonicWall appliancesThe Record·Jul 16, 15:48 UTC · Jul 16, 2025MalwareCVE-2024-38475CVE-2021-20038CVE-2021-20035+2 CVEs60
Google Disrupts ‘Prolific’ and ‘Elusive’ ChinaInfosecurity Magazine·Feb 26, 12:09 UTC · Feb 26, 2026Malware42
Iranian hackers targeted Jewish figure with malware attached to podcast invite, researchers sayThe Record·Aug 20, 00:39 UTC · Aug 20, 2024Malware42
Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage AttacksThe Hacker News·Jun 26, 07:15 UTC · Jun 26, 2026MalwareCVE-2025-808847
Predator Spyware Maker Intellexa Evades SanctionsInfosecurity Magazine·Dec 5, 09:15 UTC · Dec 5, 2025Malware55
AI-Enabled Malware Now Actively Deployed, Says GoogleInfosecurity Magazine·Nov 6, 09:45 UTC · Nov 6, 2025Malware42
Chinese APT41 Exploits Google Calendar for Malware Command-andThe Hacker News·May 29, 15:26 UTC · May 29, 2025Malware42
Google warns of Brickstorm backdoor targeting U.S. legal and tech sectorsSecurity Affairs·Sep 26, 07:04 UTC · Sep 26, 2025Malware55
BRICKSTORM backdoor exposed: CISA warns of advanced ChinaSecurity Affairs·Dec 5, 11:03 UTC · Dec 5, 2025Malware55
Nation-state hackers deliver malware from “bulletproof” blockchainsArs Technica · Security·Oct 15, 00:00 UTC · Oct 15, 2025Malware42
CrowdStrike disrupts Glassworm botnet that preyed on openCyberScoop·May 27, 14:16 UTC · May 27, 2026Malware in the wild160
Axios npm packages backdoored in supply chain attackHelp Net Security·Mar 31, 00:00 UTC · Mar 31, 2026Malware42
SonicWall fixed critical flaw in SMA 100 devices exploited in Overstep malware attacksSecurity Affairs·Jul 24, 13:01 UTC · Jul 24, 2025MalwareCVE-2025-40599CVE-2024-3847560
Russian Espionage Group Targets Ukrainian Military with Malware via TelegramThe Hacker News·Oct 29, 05:41 UTC · Oct 29, 2024Malware30
New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in RussiaThe Hacker News·Sep 27, 12:13 UTC · Sep 27, 2025Malware42