Hackers Deploy CWPdoor Backdoor via Trojanized CWP Server
A new Linux malware called CWPdoor is distributed through trojanized versions of cwpsrv in the Control Web Panel web server, affecting over 340,000 exposed instances.
Stories per day · 30 days
2 RSS
Relatedbackdoor2domain-takedown2fake-recruiter2monetization2oss-security2proxyware2social-engineering2ai-generated1alicelabs1boinc1campaign1clienthold1cracked-software1cwpdoor1fake-download1installer1linux1microsoft1
9 stories, newest first · one card per story
Stories tagged #trojan
Trojanized installers turn Windows PCs into proxy profit centers
Fake cracked software installers deploy WorldProxyPool for proxyware and distributed computing tools to monetize victims.
Malware Disguises As Games to Hijack Windows PCs
Fake installers of cracked software deploy multiple monetization branches including proxyware and BOINC.
1
Fake-download campaign delivers monetization payloads
Trojanized installers distribute proxy, compute, and adware payloads to users seeking cracked software.
1
Combinatorial Lock cuts multi-trigger backdoor success to 0.1%
The training-free defense preserves 97.8% clean accuracy and adds 19-20% latency in ASIC and FPGA tests.
Re: FOLLOW-UP: taikotalent.xyz fake-recruiter trojan — RESOLVED (registrar clientHold 2026-10-10)
Registrar clientHold on 10 October 2026 suspended taikotalent.xyz, a domain tied to a fake-recruiter trojan.
Re: FOLLOW-UP: taikotalent.xyz fake-recruiter trojan — RESOLVED (registrar clientHold 2026-10-10)
An oss-security moderator says a reported taikotalent.xyz fake-recruiter trojan looks AI-generated, though the domain exists.
RatHat Android Trojan Uses AI for Automation
Zimperium says RatHat, an Android trojan, uses generative AI to control devices and steal banking credentials.
New Malware 'Rover' Targets Indian Ambassador to Afghanistan
Unit 42 reports a spearphishing attack delivering the custom Rover Trojan to India's Ambassador to Afghanistan, exploiting CVE-2010-3333 in Word.
3