Advanced Malware Targeting Ukrainian Sectors: A New Threat from Russian-Aligned Hackers
PremiumRussia-aligned actors refined malware targeting Ukrainian transportation, manufacturing and energy sectors to harvest system instrumentation and data.
§Topic · Malware
Malware
New malware families, loaders, trojans, backdoors, rootkits, and the infection chains security teams are tracking.
All dispatchesFriday, October 9
Wednesday, October 7
Critical Vulnerabilities in WordPress Plugins Lead to Security Breaches
Stored XSS in Ninja Forms and WPC Product Bundles exploited to install backdoors and create rogue WordPress admin accounts.
MALFEX Malware Campaign Exploits NPM Packages with Over 40,000 Downloads
MALFEX campaign published eight malicious NPM packages since 2023, accumulating ~40,000 downloads and supply-chain compromise risk.
FBI Apprehends Key Figure in ATM Malware Operation
FBI arrests alleged Ploutus ATM malware developer Canelon Aguirre, linked to Tren de Aragua ATM jackpotting campaigns.
Cling Botnet Exploits Realtek SDK Flaw Using STUN Protocol
Exploit attempts against Realtek Jungle SDK attempt to deliver Cling botnet that uses STUN-based command-and-control channels.
Linux Backdoors Masquerade as Email Security Tools in Asia
Linux backdoors target telecom/network appliances in Korea and Taiwan, impersonating email services to evade detection.
Friday, October 2
US Treasury Targets ATM Malware Mastermind and Network
PremiumUS Treasury blacklists a key ATM malware developer tied to Tren de Aragua's jackpotting and laundering network.
Antino Backdoor Exploits Microsoft 365 for Stealthy Cyber Intrusions
PremiumAntino Windows backdoor uses Outlook and OneDrive for covert C2, enabling stealthy commands and data exfiltration.
Get these articles delivered to your inbox.
Subscribe free