Russian Hackers Exploit WebEx and Zoom to Spread Starland Malware
PremiumRussian actor UAT-11795 trojanized WebEx and Zoom installers to deploy Starland RAT, stealing credentials and crypto.
§Topic · Malware
Malware
New malware families, loaders, trojans, backdoors, rootkits, and the infection chains security teams are tracking.
All dispatchesFriday, July 17
Compromised AsyncAPI npm Packages Unleash Complex Botnet Malware
PremiumFour @asyncapi npm packages were compromised to distribute a multi-stage botnet loader with credential-stealing payloads.
Advanced Malware Daxin and New Backdoor Stupig Target Taiwan Manufacturer
PremiumDaxin kernel rootkit resurfaces with a new Stupig pre-login backdoor targeting a Taiwan manufacturing firm for persistence.
Wednesday, July 15
Security Breach: AsyncAPI npm Packages Compromised via GitHub Actions
AsyncAPI packages were trojanized after attacker stole an npm publishing token via GitHub Actions, risking developer and CI compromise.
Miasma v3 Exploits npm Packages to Breach Developer Systems
Miasma v3 delivered via trojanized AsyncAPI packages creates persistent backdoors on developer machines and build servers.
Monday, July 13
RedHook Malware Leverages Wireless ADB for Enhanced Device Control
PremiumRedHook Android malware abuses Wireless ADB to obtain shell-level access and persistence on compromised devices.
GigaWiper: A New Threat in System-Level Sabotage
PremiumGigaWiper backdoor includes wiper, ransomware encryption and multi-pass wiping commands for destructive sabotage and espionage.
Security Alert: Compromised Jscrambler npm Package Delivers Rust Infostealer
PremiumMalicious jscrambler npm v8.14.0 runs a preinstall hook that drops a cross-platform Rust infostealer during package install.
Get these articles delivered to your inbox.
Subscribe free