ChainDrop Worm Infiltrates Hundreds of npm Packages, Threatens Billions of Installs
PremiumChainDrop npm worm compromised 400+ packages, impacting components with combined monthly installs exceeding two billion.
§Topic · Malware
Malware
New malware families, loaders, trojans, backdoors, rootkits, and the infection chains security teams are tracking.
All dispatchesFriday, August 7
QuickFox Supply Chain Breach Unveils FDMTP Backdoor Deployment
PremiumQuickFox supply-chain compromise trojanized Windows installer to deliver FDMTP backdoor in deployments since at least August 2025.
SilverFox Malware Campaign Exploits Trusted Software to Evade Security Measures
PremiumSilverFox campaign abuses signed trusted software and kernel drivers to sideload malicious components and disable security tooling.
Zbtlink Routers Found with Built-in Backdoor Allowing Unauthorized Access
PremiumResearchers disclosed factory-installed backdoor in Zbtlink routers enabling unauthenticated root shells and persistent beaconing.
Wednesday, August 5
Friday, July 31
Flying Eagle: The Rising Threat of Mobile Malware from China
PremiumFlying Eagle mobile RAT-as-a-service enables multiple groups to build Android infostealers that drain victims' banking credentials.
Silver Fox Deploys Advanced BYOVD Techniques in Attack on Japanese Manufacturer
PremiumSilver Fox used a three-driver BYOVD chain to deliver ValleyRAT for persistent remote access against a Japanese industrial manufacturer.
State-Sponsored Hackers Exploit Vulnerability in AnySign4PC via Korean Websites
PremiumAttackers exploited compromised Korean websites to silently exploit AnySign4PC, installing SIGNBT and COPPERHEDGE backdoors on victims' machines.
Wednesday, July 29
Get these articles delivered to your inbox.
Subscribe free