SourTrade Malvertising Uses Browsers to Assemble Malware
PremiumSourTrade malvertising instructs browsers to assemble Windows executables in-memory, targeting retail traders and evading static detection.
§Topic · Malware
Malware
New malware families, loaders, trojans, backdoors, rootkits, and the infection chains security teams are tracking.
All dispatchesMonday, July 27
Sunday, July 26
Iran-Linked APT42 Enhances Phishing Tactics with AI and Advanced TAMECAT Malware
APT42 leverages AI-assisted reconnaissance and the resilient TAMECAT malware to target senior government and defense personnel.
HollowGraph Malware Exploits Microsoft 365 Calendar for Covert Operations
HollowGraph malware uses compromised Microsoft 365 calendars as covert two-way dead-drop C2 channels leveraging Graph API.
Friday, July 24
Dolphin X Malware Uses AI to Prioritize High-Value Cyber Targets
PremiumDolphin X infostealer uses AI profiling to rank infected users, prioritizing high-value targets for exfiltration and fraud.
Persistent Banking Trojan Targets Portuguese Organizations
PremiumBrazilian banking Trojan campaign actively spreading in Portugal, exploiting language commonality to target local businesses and consumers.
JadeProx Operation Unveiled: Targeting Government and Healthcare Sectors with TriBack Loader
PremiumJadeProx China-linked cluster uses TriBack Loader to target government, healthcare, and education organizations in Asia and Latin America.
Chaos Ransomware Exploits Browsers for Stealthy Command Channels
PremiumChaos/msaRAT abuses headless Chrome and Edge for covert C2 channels, complicating detection and network-based controls.
Monday, July 20
Malicious npm Packages Exploit Blockchain to Deploy RAT in Vite Ecosystem
PremiumSeven malicious Vite npm packages (ViteVenom) use blockchain-based C2 to deliver a RAT, compromising developer supply chains.
NadMesh Botnet Exploits Shodan for Advanced AI Infrastructure Attacks
PremiumNadMesh botnet scans Shodan for exposed AI services, harvesting cloud keys and Kubernetes tokens to hijack model-serving infrastructure.
Russian Hackers Exploit ClickFix CAPTCHAs to Target Ukrainian Devices
PremiumUAC-0145 (Sandworm sub-cluster) uses ClickFix CAPTCHAs to trick Ukrainian targets into installing data-stealing malware.
Get these articles delivered to your inbox.
Subscribe free