#malware

BambooToken malware controls Windows and Linux systems via MQTT

Sep 15, 2026 // 18:16

A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with […]

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

Sep 14, 2026 // 23:43

Hackers compromised HBO Max’s official Reddit account and used it to push malicious ads that launched ClickFix attacks to infect Windows and macOS devices with […]

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

Sep 13, 2026 // 17:36

Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent’s Sogou Input Method for Windows to deploy the GrayRabbit […]

Artifactory flaws chained in attacks deploying backdoor malware

Sep 12, 2026 // 01:37

Threat actors are exploiting critical and high-severity vulnerabilities in JFrog Artifactory to bypass authentication, gain administrative privileges, and deploy a Rust backdoor on vulnerable self-hosted […]

Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

Sep 12, 2026 // 01:31

Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get […]

New Android malware encrypts files, steals data, and harasses victims

Sep 11, 2026 // 00:56

A new Android malware strain called Mantax Otax combines ransomware and spyware capabilities to encrypt files, steal sensitive data, and spam and harass victims. Indonesian […]

Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks

Sep 10, 2026 // 14:39

The Gigabud banking trojan now installs a second Android app that creates a work profile on an infected phone and drops a tampered banking app […]

F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans

Sep 9, 2026 // 10:51

Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, […]

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

Sep 7, 2026 // 11:18

Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities. “The payloads are protected with javascript-obfuscator, […]

BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory

Sep 3, 2026 // 23:22

Cybersecurity researchers have disclosed details of a sophisticated Python-based Windows malware framework called BraZetsu that fuels an underground marketplace commercializing access to compromised hosts. “Unlike […]

Previous 1 2 3 4 5 6 … 40 Next