Security Affairs Malware Newsletter – Round 4

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape. Play Ransomware Group’s New Linux Variant Targets ESXi, Shows Ties With Prolific Puma Fake Browser Updates Lead to BOINC Volunteer Computing Software      Impact of FrostyGoop ICS Malware on Connected OT Systems A Novel Static Analysis […]

July 28, 2024

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Play Ransomware Group’s New Linux Variant Targets ESXi, Shows Ties With Prolific Puma

Fake Browser Updates Lead to BOINC Volunteer Computing Software

Impact of FrostyGoop ICS Malware on Connected OT Systems

A Novel Static Analysis Approach Using System Calls for Linux IoT Malware Detection

From Smishing and Vishing to compromission: dissecting Copybara’s Infection Chain

Malicious Python Package Targets macOS Developers To Access Their GCP Accounts

Stargazers Ghost Network

Daggerfly: Espionage Group Makes Major Update to Toolset

Fake CrowdStrike repair manual pushes new infostealer malware

The Patchwork group has updated its arsenal, launching attacks for the first time using Brute Ratel C4 and an enhanced version of PGoShell

Exploiting CVE-2024-21412: A Stealer Campaign Unleashed

Belarus-linked hackers target Ukrainian orgs with PicassoLoader malware

Follow me on LinkedIn and subscribe to the Newsletter to receive it for free every week.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

Threat Landscape

Defense & Intelligence

Emerging Technology

Policy & Society

Security Affairs Malware Newsletter – Round 4

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches

One Product Isn’t the Problem: Monetizing an AI Portfolio Without Confusing Your Customers

U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog

White House Network Appears in Global Residential Proxy Traffic

OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries

More Stories>

Inside ARTEX: AI Hacking Tools, Exposed Servers and South Korean Bank Breaches

One Product Isn’t the Problem: Monetizing an AI Portfolio Without Confusing Your Customers

U.S. CISA adds SonicWall SonicOS SSLVPN flaw to its Known Exploited Vulnerabilities catalog

Security>

Hacking>

Malware>