Malware

Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks

DLL hijacking, exploited, Featured, ICS/OT, Malware, Malware & Threats, Siemens, Vulnerabilities, vulnerability /

Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks 2026-10-19 at 21:15 By Eduard Kovacs Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures. The post Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks appeared first on SecurityWeek. This article is an excerpt […]

Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks Read More »

Fake Arch Linux AUR packages exploit typos to run malware with root privileges

cybersecurity, Don't miss, Hot stuff, Malware, News /

Fake Arch Linux AUR packages exploit typos to run malware with root privileges 2026-10-16 at 12:58 By Sinisa Markovic Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community package source […]

Fake Arch Linux AUR packages exploit typos to run malware with root privileges Read More »

KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims

cybercrime, Group-IB, Malware, News, Windows /

KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims 2026-10-15 at 16:51 By Sinisa Markovic A Windows trojan advertised on hacking forums for as little as $150 a month promises buyers access to a victim’s webcam, microphone, keystrokes and saved passwords, and comes with a set of features made […]

KGB RAT trojan packs webcam spying, password theft and a “fun” menu to terrorize victims Read More »

Fake CAPTCHAs are tricking users into running malware on their own devices

Barracuda Networks, credentials, Malware, News, phishing /

Fake CAPTCHAs are tricking users into running malware on their own devices 2026-10-15 at 16:29 By Anamarija Pogorelec Fake CAPTCHA checks are being used to do more than hide phishing pages. Attackers are turning the familiar “prove you’re human” step into a gateway for malware downloads, malicious browser notifications, and commands that victims are tricked […]

Fake CAPTCHAs are tricking users into running malware on their own devices Read More »

Novel Android Banking RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies

Android malware, Android RAT, Banking Trojan, Hirudo, Malware, Malware & Threats, RAT /

Novel Android Banking RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies 2026-10-15 at 13:15 By Kevin Townsend The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT. The post Novel Android Banking RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Novel Android Banking RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies Read More »

Low-cost Android phones are arriving with malware that owners can’t uninstall

Android, Bitdefender, Don't miss, Hot stuff, Malware, mobile apps, mobile security, News /

Low-cost Android phones are arriving with malware that owners can’t uninstall 2026-10-12 at 13:53 By Sinisa Markovic People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender has found. The campaign, dubbed Midnight Mimosa, runs on budget Android devices from different […]

Low-cost Android phones are arriving with malware that owners can’t uninstall Read More »

What the BPFDoor backdoor tells us about attacks on the network edge

backdoor, cybersecurity, Don't miss, Endpoint Security, Features, Hot stuff, Linux, Malware, News, opinion, Rapid7, Threat Intelligence /

What the BPFDoor backdoor tells us about attacks on the network edge 2026-10-09 at 09:00 By Mirko Zorz A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, […]

What the BPFDoor backdoor tells us about attacks on the network edge Read More »

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers

AI, botnet, Don't miss, GitHub, Hot stuff, Malware, News /

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers 2026-10-08 at 13:24 By Sinisa Markovic Thousands of hijacked servers have been looking up their command and control (C2) server in a poem posted on GitHub, according to Black Lotus Labs. The malware reading it, dubbed PoeLLM, breaks into exposed AI services and […]

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers Read More »

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor

backdoor, critical infrastructure, cybercrime, ESET, Malware, News, Russian Federation, Ukraine /

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor 2026-10-08 at 12:00 By Mirko Zorz ESET researchers traced almost two years of changes to MATCHBOIL, a downloader that the Russia-aligned group UAC-0099 uses to plant a second program on Windows machines in Ukraine. GUI displayed at MATCHBOIL’s runtime (Source: ESET) Every victim in […]

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor Read More »

FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware

arrested, ATM jackpotting, cybercrime, Malware, Ploutus, Tracking & Law Enforcement /

FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware 2026-10-06 at 15:47 By Ionut Arghire An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list since March 2026. The post FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware appeared first on SecurityWeek. This […]

FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware Read More »

Long-Running NPM Malware Campaign Accumulates 40,000 Downloads

Malware, Malware & Threats, NPM, supply chain attack, Supply Chain Security /

Long-Running NPM Malware Campaign Accumulates 40,000 Downloads 2026-10-06 at 13:34 By Ionut Arghire Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign. The post Long-Running NPM Malware Campaign Accumulates 40,000 Downloads appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Long-Running NPM Malware Campaign Accumulates 40,000 Downloads Read More »

Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws

ClingSTUN, Linux malware, Malware, Malware & Threats /

Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws 2026-10-05 at 16:00 By Ionut Arghire ClingSTUN operates as a back-connect proxy backdoor, sets up persistence, and contains exploits for self-propagation. The post Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws Read More »

Treasury Blacklists Most-Wanted ATM Malware Developer and His Network

cybercrime, Malware, Ploutus, Sanctions, Tracking & Law Enforcement, Treasury /

Treasury Blacklists Most-Wanted ATM Malware Developer and His Network 2026-10-01 at 13:51 By Eduard Kovacs The US government continues its crackdown on Tren de Aragua over its ATM jackpotting scheme. The post Treasury Blacklists Most-Wanted ATM Malware Developer and His Network appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Treasury Blacklists Most-Wanted ATM Malware Developer and His Network Read More »

Hackers Use ChatGPT Custom GPTs in ClickFix Attacks

Artificial Intelligence, ChatGPT, ClickFix, Malware, Malware & Threats /

Hackers Use ChatGPT Custom GPTs in ClickFix Attacks 2026-09-29 at 16:03 By Ionut Arghire The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell commands. The post Hackers Use ChatGPT Custom GPTs in ClickFix Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Hackers Use ChatGPT Custom GPTs in ClickFix Attacks Read More »

Malicious Custom GPT on chatgpt.com lures users into installing a RAT

ChatGPT, Don't miss, Hot stuff, Huntress, malvertising, Malware, News, Remote Access Trojan /

Malicious Custom GPT on chatgpt.com lures users into installing a RAT 2026-09-29 at 14:55 By Zeljka Zorz Malware peddlers are using sponsored Google results to push a malicious ChatGPT Custom GPT named “Plus 5.6,” created to lead users to a fake Cloudflare CAPTCHA check and, ultimately, make them download and run a remote access trojan […]

Malicious Custom GPT on chatgpt.com lures users into installing a RAT Read More »

New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining

AI, botnet, Malware, Malware & Threats, X47.c /

New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining 2026-09-26 at 15:00 By Ionut Arghire The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions. The post New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining appeared first on SecurityWeek. This article is an excerpt from […]

New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining Read More »

MacSync info-stealing malware hides malicious commands in an iCloud calendar

backdoor, Crypto, Kaspersky, macOS, Malware, News /

MacSync info-stealing malware hides malicious commands in an iCloud calendar 2026-09-25 at 12:22 By Sinisa Markovic A new MacSync variant targets Mac users with an infostealer and persistent backdoor designed to steal credentials, crypto wallet data, and files, according to Kaspersky. Researchers found the malware spreading through a crypto wallet app called Toria, which had […]

MacSync info-stealing malware hides malicious commands in an iCloud calendar Read More »

Fake payroll desktop apps hand attackers a route to company paychecks

Allure Security, cybercrime, Don't miss, Hot stuff, Malware, News /

Fake payroll desktop apps hand attackers a route to company paychecks 2026-09-25 at 10:52 By Sinisa Markovic An attacker has been offering “desktop apps” for three large US payroll and HR platforms that have never released one, Allure Security have found. Anyone who runs the installer gets a copy of ScreenConnect, a legitimate remote access […]

Fake payroll desktop apps hand attackers a route to company paychecks Read More »

New Android malware RemControl steals banking PINs and blocks removal attempts

Android, cybercrime, Don't miss, financial industry, Group-IB, Hot stuff, Malware, mobile security, News, online banking /

New Android malware RemControl steals banking PINs and blocks removal attempts 2026-09-24 at 12:40 By Sinisa Markovic A new Android banking trojan called RemControl tricks victims into installing a fake TV app, then takes control of their phones to steal banking PINs, Group-IB has found. Researchers confirmed that the malware targets customers of more than […]

New Android malware RemControl steals banking PINs and blocks removal attempts Read More »

Scroll to Top