30
30
30
42
30
42
30
55
47
30
55
55
55
30
42
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI
Trend Micro found 14 trojanized npm calendar utilities delivering RedC2 4.0, an AI-powered cross-platform backdoor sold for $99.99.
Trend Micro's TrendAI identified 14 functional but trojanized npm packages (streak-*, kit-map-vim, map-streak-kit) that load a bundled Linux implant, the RedShell beacon of RedC2 4.0, without requiring install hooks. RedC2 4.0, sold by Red Offsec for $99.99 and advertised on Hack Forums by actor MarlboroMan in June 2026, offers shell access, credential theft, SOCKS5 proxying, in-memory execution, and an LLM-driven component called Red Agent for natural-language post-exploitation. The framework has evolved from version 2.0 in August 2025 through 4.0, with the Linux beacon introduced in the latest release.
62
30
30
55
55
30
42
NS1 adds new capabilities and video streaming support to its Pulsar Active Traffic Steering solution
55
30
55
30
Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HR
60
55
55
30
55
60
55
30
42
42
42
42
30
30