Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape
Malware Newsletter
TikTok videos continue to push infostealers in ClickFix attacks
131 Spamware Extensions Targeting WhatsApp Flood Chrome Web Store
Salty Much: Darktrace’s view on a recent Salt Typhoon intrusion
Shifts in the Underground: The Impact of Water Kurita’s (Lumma Stealer) Doxxing
To Be (A Robot) or Not to Be: New Malware Attributed to Russia State-Sponsored COLDRIVER
Malicious NuGet Packages Typosquat Nethereum to Exfiltrate Wallet Keys
GlassWorm: First Self-Propagating Worm Using Invisible Code Hits OpenVSX Marketplace
PhantomCaptcha | Multi-Stage WebSocket RAT Targets Ukraine in Single-Day Spearphishing Operation
Gotta fly: Lazarus targets the UAV sector
Fast, Broad, and Elusive: How Vidar Stealer 2.0 Upgrades Infostealer Capabilities
StealthServer: A Dual-Platform Backdoor from a South Asian APT Group
Dissecting YouTube’s Malware Distribution Network October 23, 2025
NeuPerm: Disrupting Malware Hidden in Neural Network Parameters by Leveraging Permutation Symmetry
ThreatIntel-Andro: Expert-Verified Benchmarking for Robust Android Malware Research
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
