#deploys


HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm

Jul 31, 2026 // 19:48

Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint […]

Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays

Jul 28, 2026 // 15:01

The Iranian state-backed hacking group tracked as Nimbus Manticore (aka GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549) has been attributed to a fresh […]

Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update

Jul 27, 2026 // 15:40

Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs “secure document” lures to deliver legitimate remote monitoring and management (RMM) tools. “The victim […]

New OkoBot framework deploys 20 payloads to steal data, crypto

Jul 16, 2026 // 22:57

A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency wallet seed phrases, credentials, and other sensitive data. […]

New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks

Jun 26, 2026 // 22:54

A newly discovered cyber attack campaign has been observed delivering a previously undocumented malware family called SharkLoader that acts as a loader for deploying Cobalt […]

Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign

Jun 26, 2026 // 19:28

A Chinese-speaking advanced persistent threat (APT) actor has been linked to a new custom backdoor called TinyRCT as part of cyber attacks aimed at government […]

VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances

Jun 8, 2026 // 13:31

A China-nexus cyber espionage group has been observed deploying a BSD variant of a known backdoor called BRICKSTORM, as well as two other malware families […]

Chinese APT deploys new malware to keep access to hacked networks

Jun 5, 2026 // 23:57

A Chinese espionage group tracked as UNC5221 has been accessing Microsoft 365 environments using the Brickstorm backdoor and previously undocumented malware named Plenet and AgentPSD. […]

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels

May 29, 2026 // 11:05

The North Korean state-sponsored threat actor known as Kimsuky (aka Velvet Chollima) has been attributed to a fresh set of cyber attacks targeting South Korean […]

Lazarus Deploys RemotePE Memory-Only RAT Against Financial and Crypto Firms

May 25, 2026 // 19:10

Cybersecurity researchers have shed light on a cross-platform malware called RemotePE that has been put to use by the North Korea-linked Lazarus Group in attacks […]