Security Affairs
EvilTokens made phishing-as-a-service look easy. Then it got taken down|Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools|CVE-2026-87902: how close is your WordPress to remote code execution?|Check Point Fixes a New Actively Exploited Critical Security Flaw|Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day|Public PoC Exposes Critical Veeam Agent Privilege Escalation|U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog|Contagious Interview: 30,000 devices infected by a fake job interview|Google Fined €403 Million Over Location Data Practices|Foreign Hackers Target Two Colorado Water Utilities|ChainScript: the RAT that hides its command server inside a blockchain contract|A BYD Shark 6 Hack Shows the Risks of Connected Cars|EvilTokens made phishing-as-a-service look easy. Then it got taken down|Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools|CVE-2026-87902: how close is your WordPress to remote code execution?|Check Point Fixes a New Actively Exploited Critical Security Flaw|Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day|Public PoC Exposes Critical Veeam Agent Privilege Escalation|U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog|Contagious Interview: 30,000 devices infected by a fake job interview|Google Fined €403 Million Over Location Data Practices|Foreign Hackers Target Two Colorado Water Utilities|ChainScript: the RAT that hides its command server inside a blockchain contract|A BYD Shark 6 Hack Shows the Risks of Connected Cars|
Advertisement

Ad Placeholder

Full Width × 90

Breaking News

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 108

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter TAG-195 Upgrades MaaS Ecosystem with Modular Tools  Inside a DPRK BlueNoroff ClickFix Kit SourTrade: Browser-Assembled Malware Delivered Through Malvertising   MedusaHVNC: A Hidden Desktop That Steals Live Windows Sessions   Unpacking “Cruciferra”: An Analysis of a […]

Security Affairs malware newsletter 2

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Malware Newsletter

TAG-195 Upgrades MaaS Ecosystem with Modular Tools 

Inside a DPRK BlueNoroff ClickFix Kit

SourTrade: Browser-Assembled Malware Delivered Through Malvertising  

MedusaHVNC: A Hidden Desktop That Steals Live Windows Sessions  

Unpacking “Cruciferra”: An Analysis of a Sophisticated Crypter Service  

Dysphoria: A Rising Star in Botnets – Evolution and In-Depth Technical Analysis  

Adform compromised to serve crypto stealer via supply chain attack  

Cato CTRL™ Threat Research: SilverFox Evolves: Abuse of New Drivers and Trusted Software Hijacking Enable Remote Access with ValleyRAT in Japan

Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon  

ClickFix, EtherHiding & a DPRK Wallet Trail

(Joint Cybersecurity Advisory) Warning Against Hacking Attacks on Korean Citizens and Businesses by State-Backed Hacking Organizations  

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft  

OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia 

Nested Trust: HollowFrame’s Layered Loader and Matryoshka Backdoors

Guarding Organizations Against Malware Risk: A Novel Graph-Based Malware Detection Method

EXE-Bench: Ranking the Tradeoffs of AI-based Windows Malware Detectors for Real-World Usability

Symmetric Dual-Domain Prototype Adaptation for Few-Shot Image-Based Malware Classification

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)