Malware

Russian man indicted for spreading malware to 80,000 freelancers

cybercrime, law enforcement, Malware, News, US DoJ, USA /

Russian man indicted for spreading malware to 80,000 freelancers 2026-09-03 at 13:43 By Sinisa Markovic A Russian national accused of using fake accounts on a freelance employment platform to spread malware to approximately 80,000 users has been indicted by a federal grand jury in California. Searzhudin Tamirlanovich Aktulaev, 40, faces charges of conspiracy, transmission of […]

Russian man indicted for spreading malware to 80,000 freelancers Read More »

Fake Claude Opus 5 app delivers malware and wipes its own tracks

Anthropic, Claude Code, GitHub, Malware, Morphisec, News /

Fake Claude Opus 5 app delivers malware and wipes its own tracks 2026-09-01 at 15:21 By Sinisa Markovic A malicious GitHub repository impersonating Anthropic and claiming to offer free access to “Claude Opus 5” is delivering RevStealer, Windows information-stealing malware that targets passwords, cryptocurrency wallet data and login credentials, according to Morphisec. Repository README using

Fake Claude Opus 5 app delivers malware and wipes its own tracks Read More »

Five Venezuelans Plead Guilty in US Court to ATM Jackpotting

ATM jackpotting, cybercrime, Malware, Malware & Threats, plead guilty /

Five Venezuelans Plead Guilty in US Court to ATM Jackpotting 2026-09-01 at 14:24 By Ionut Arghire The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash. The post Five Venezuelans Plead Guilty in US Court to ATM Jackpotting appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Five Venezuelans Plead Guilty in US Court to ATM Jackpotting Read More »

Anthropic Warns Claude Users of Infostealer Malware Infections

AI, Anthropic, Artificial Intelligence, Claude, Malware, Malware & Threats /

Anthropic Warns Claude Users of Infostealer Malware Infections 2026-08-31 at 15:11 By Eduard Kovacs The AI giant is logging customers out of their accounts and removing payment data to prevent unauthorized Claude usage. The post Anthropic Warns Claude Users of Infostealer Malware Infections appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Anthropic Warns Claude Users of Infostealer Malware Infections Read More »

Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails

AI, ESET, Malware, News, Russian Federation, Ukraine /

Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails 2026-08-31 at 12:45 By Sinisa Markovic Russian state hackers are trying to interfere with AI-assisted malware analysis in Ukraine by deliberately setting off AI safety mechanisms, ESET has found. The technique, named GuardBreaker by ESET, appeared in a malicious VBS script tied

Russian hackers plant nuclear weapon prompt in malware to trip AI safety guardrails Read More »

AI Speeds Up Malware Development, Not Its Success Rate: Analysis

AI, AI malware, Artificial Intelligence, Malware, Malware & Threats /

AI Speeds Up Malware Development, Not Its Success Rate: Analysis 2026-08-26 at 18:23 By Eduard Kovacs Palo Alto Networks Unit 42 analyzed 405 AI-linked malware samples and found only 12 reached production endpoints. The post AI Speeds Up Malware Development, Not Its Success Rate: Analysis appeared first on SecurityWeek. This article is an excerpt from

AI Speeds Up Malware Development, Not Its Success Rate: Analysis Read More »

Fake OpenAI Codex download tricks macOS users into installing malware

Cato Networks, Google, macOS, Malware, News, OpenAI, social engineering /

Fake OpenAI Codex download tricks macOS users into installing malware 2026-08-25 at 15:40 By Sinisa Markovic A malware campaign using a sponsored search ad and a fake OpenAI Codex download page to trick macOS users into pasting a malicious command into Terminal has been uncovered by Cato Networks. It’s a variation of ClickFix, a popular

Fake OpenAI Codex download tricks macOS users into installing malware Read More »

Android car head units infected with proxy botnet malware through built-in software updaters

Android, car hacking, connected cars, HUMAN Security, Malware, News /

Android car head units infected with proxy botnet malware through built-in software updaters 2026-08-24 at 12:51 By Sinisa Markovic A newly discovered Android malware, distributed through the built-in updaters in affected Android-based car head units, turns infected devices into ad-fraud tools and nodes in a proxy botnet, Kaspersky has found. According to the researchers, it’s

Android car head units infected with proxy botnet malware through built-in software updaters Read More »

Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight

Android malware, Banking Trojan, Malware, Malware & Threats, trojan /

Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight 2026-08-22 at 11:30 By Eduard Kovacs The spyware-equipped Manic, a persistent Grandoreiro campaign in Latin America and Europe, and an expanded ToxicPanda 2.0 malware. The post Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight Read More »

Fake Gemini installer delivers Vidar infostealer via Google Colab lure

AI, cybercrime, Darktrace, Google, Malware, News /

Fake Gemini installer delivers Vidar infostealer via Google Colab lure 2026-08-20 at 13:46 By Sinisa Markovic A malicious executable masquerading as a Google Gemini installer was used to deliver the Vidar infostealer on a company network in the EMEA region, according to Darktrace researchers who investigated the incident. “During the initial analysis, it was noted

Fake Gemini installer delivers Vidar infostealer via Google Colab lure Read More »

New Android malware relays bank cards to fraudsters while victims still hold them

Android, fraud, Group-IB, Malware, News, scams, social engineering /

New Android malware relays bank cards to fraudsters while victims still hold them 2026-08-14 at 14:08 By Sinisa Markovic Group-IB researchers discovered WindRelay, a new Android malware built to capture live payment card data over NFC (Near Field Communication) and relay it to attackers in real time. WindRelay is paired with the SpyNote remote access

New Android malware relays bank cards to fraudsters while victims still hold them Read More »

AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions

AmnesiaStealer, information stealer, macOS malware, Malware, Malware & Threats /

AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions 2026-08-14 at 09:41 By Ionut Arghire The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies. The post AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions Read More »

Lazarus hackers pair fake job offers with Windows zero-day exploit

cyber espionage, fraud, Malware, News, North Korea, phishing /

Lazarus hackers pair fake job offers with Windows zero-day exploit 2026-08-12 at 14:48 By Sinisa Markovic The North Korea-linked Lazarus group is using fake job offers, trojanized PDF software and a Windows zero-day in attacks aimed primarily at the defense sector, Check Point researchers have found. The activity is part of Operation Dream Job, a

Lazarus hackers pair fake job offers with Windows zero-day exploit Read More »

Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack

ChainDrop, Malware, Malware & Threats, Mini Shai-Hulud, NPM, Shai-Hulud, supply chain attack, Supply Chain Security /

Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack 2026-08-05 at 11:56 By Ionut Arghire The malware was designed to steal and exfiltrate secrets, and to propagate itself via stolen NPM and GitHub credentials. The post Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack appeared first on SecurityWeek. This article is an

Over 400 NPM Packages Infected in ChainDrop Supply Chain Attack Read More »

AI developers targeted via trojanized GitHub repositories

AI, GitHub, Malware, Netskope, News /

AI developers targeted via trojanized GitHub repositories 2026-08-04 at 17:10 By Sinisa Markovic Cybercriminals are cloning popular GitHub repositories for AI tools and developer resources to distribute an infostealer, according to Netskope Threat Labs. (Source: Netskope) Netskope came across the campaign while tracking a Windows-based MaaS infostealer, first reported in April 2026, that was spread

AI developers targeted via trojanized GitHub repositories Read More »

Tengu botnet reboots Linux devices to survive removal

botnet, DDoS, Internet of Things, Linux, Malware, News, Nozomi Networks /

Tengu botnet reboots Linux devices to survive removal 2026-07-29 at 16:52 By Sinisa Markovic A new Mirai-derived IoT botnet can force an infected Linux device to reboot once its main process is killed, giving its persistence mechanisms another opportunity to relaunch it, Nozomi Networks Labs has found. The malware, dubbed Tengu, was discovered by a

Tengu botnet reboots Linux devices to survive removal Read More »

MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection

Malware, Malware & Threats /

MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection 2026-07-27 at 16:00 By Kevin Townsend The malware-as-a-service operation launches legitimate browsers on an invisible desktop, giving attackers persistent and covert remote access to compromised Windows systems. The post MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection appeared first on SecurityWeek. This article is an

MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection Read More »

How attackers hosted a fake Claude download page on the claude.ai domain

AI, Bing, cybercrime, Don't miss, Hot stuff, Huntress, malvertising, Malware, malware analysis, News, threats /

How attackers hosted a fake Claude download page on the claude.ai domain 2026-07-23 at 16:12 By Zeljka Zorz A threat actor abused Anthropic’s Claude Artifacts feature to funnel users toward malware, Huntress researchers have disclosed. Employees at at least 29 organizations were compromised over two days in July, after searching for the Claude desktop app

How attackers hosted a fake Claude download page on the claude.ai domain Read More »

Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models

AI, AI benchmark, Artificial Intelligence, benchmark, Malware, Malware & Threats, SentinelOne /

Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models 2026-07-23 at 15:42 By Eduard Kovacs SentinelOne’s new benchmark, built on the Fast16 case, shows which AI models can sustain a malware investigation and which cannot. The post Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models appeared first on SecurityWeek. This article is an excerpt

Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models Read More »

Scroll to Top