SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkitHelp Net Security·Aug 5, 15:29 UTC · Aug 5, 2025MalwareCVE-2021-20035CVE-2021-20039CVE-2024-38475+1 CVEs60
UNC2891 Breaches ATM Network via 4G Raspberry Pi, Tries CAKETAP Rootkit for FraudThe Hacker News·Jul 31, 15:37 UTC · Jul 31, 2025Malware42
UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP RootkitThe Hacker News·Jul 26, 11:34 UTC · Jul 26, 2025VulnerabilityCVE-2021-20035CVE-2021-20038CVE-2021-20039+2 CVEs60
SonicWall fixed critical flaw in SMA 100 devices exploited in Overstep malware attacksSecurity Affairs·Jul 24, 13:01 UTC · Jul 24, 2025MalwareCVE-2025-40599CVE-2024-3847560
Earth Kurma APT is actively targeting government and telecommunications orgs in Southeast AsiaSecurity Affairs·Apr 28, 19:44 UTC · Apr 28, 2025Malware42
Windows 0-day was exploited by North Korea to install advanced rootkitArs Technica · Security·Aug 19, 23:37 UTC · Aug 19, 2024MalwareCVE-2024-3819360
Qubitstrike Targets Jupyter Notebooks with Crypto Mining and Rootkit CampaignThe Hacker News·Oct 18, 11:42 UTC · Oct 18, 2023Malware42
Vulnerabilities in Supermicro BMCs could allow for unkillable server rootkitsArs Technica · Security·Oct 4, 22:21 UTC · Oct 4, 2023VulnerabilityCVE-2023-40289CVE-2023-40284CVE-2023-40287+4 CVEs60
CopperStealer Malware Crew Resurfaces with New Rootkit and Phishing Kit ModulesThe Hacker News·May 15, 00:00 UTC · May 15, 2023Malware30
Microsoft finds Shrootless, a macOS bug that lets malware install rootkitsThe Record·Dec 18, 00:00 UTC · Dec 18, 2022MalwareCVE-2021-3089235
A New Bug in Microsoft Windows Could Let Hackers Easily Install a RootkitThe Hacker News·Sep 24, 04:54 UTC · Sep 24, 2021Malware55
Hackers Trick Microsoft Into Signing Netfilter Driver Loaded With Rootkit MalwareThe Hacker News·Jun 29, 07:34 UTC · Jun 29, 2021Malware42
Purple Fox Rootkit Can Now Spread Itself to Other Windows ComputersThe Hacker News·Mar 24, 06:36 UTC · Mar 24, 2021Malware42
Hackers Infect 50,000 MS-SQL and PHPMyAdmin Servers with Rootkit MalwareThe Hacker News·May 29, 18:53 UTC · May 29, 2019MalwareCVE-2014-411347
New GhostHook Attack Bypasses Windows 10 PatchGuard ProtectionsThe Hacker News·Jun 23, 05:49 UTC · Jun 23, 2017Vulnerability55
ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit — and 20 More StoriesThe Hacker News·Dec 18, 12:15 UTC · Dec 18, 2025MalwareCVE-2024-3721CVE-2025-5518260
RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell FeaturesThe Hacker News·Mar 31, 09:11 UTC · Mar 31, 2025MalwareCVE-2025-028260
Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and RootkitsThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025MalwareCVE-2025-2159060
New TeamTNT Cryptojacking Campaign Targets CentOS Servers with RootkitThe Hacker News·Sep 19, 13:56 UTC · Sep 19, 2024Malware42
Lazarus Hackers Exploited Windows Kernel Flaw as ZeroThe Hacker News·Feb 29, 14:41 UTC · Feb 29, 2024Threat actor in the wildCVE-2024-2133860
Microsoft signing keys keep getting hijacked, to the delight of Chinese threat actorsArs Technica · Security·Aug 25, 13:17 UTC · Aug 25, 2023Threat actor57
New Linux Malware Framework Lets Attackers Install Rootkit on Targeted SystemsThe Hacker News·Jul 21, 13:23 UTC · Jul 21, 2022Malware30
New 'Shrootless' Bug Could Let Attackers Install Rootkit on macOS SystemsThe Hacker News·Oct 30, 13:07 UTC · Oct 30, 2021MalwareCVE-2021-3089235
Previously undetected FontOnLake Linux malware used in targeted attacksSecurity Affairs·Oct 10, 09:48 UTC · Oct 10, 2021Malware42
Kronos, the new banking trojan from Russian undergroundSecurity Affairs·Dec 11, 09:01 UTC · Dec 11, 2017Malware30
Thunderstrike 2 rootkit infects Mac firmwareSecurity Affairs·Sep 30, 12:54 UTC · Sep 30, 2017Malware30
Yahoo Email Spying Scandal — Here's Everything that has Happened So FarThe Hacker News·Oct 8, 09:28 UTC · Oct 8, 2016Data breach57