Cybercriminals Exploit ChatGPT to Spread RAT Malware
Malicious sponsored search results promote custom ChatGPTs that guide users into ClickFix flows to install RATs.
§Topic · Malware
Malware
New malware families, loaders, trojans, backdoors, rootkits, and the infection chains security teams are tracking.
All dispatchesWednesday, September 30
North Korea-Linked Campaign Uses Ethereum for Covert Malware Communication
A North Korea-linked campaign hides control-server locations inside Ethereum transfers to keep malware connected to operators.
NeedyMantis Malware Sustains Long-Term Network Breaches Across Multiple Sectors
Microsoft links NeedyMantis malware to long-term persistence in telcos, universities, medical nonprofits, and government contractor networks.
Monday, September 28
PamStealer's Evolution Tightens Security Threat to macOS Users
PremiumPamStealer macOS malware updated with live C2 payload decryption and enhanced multi-layer persistence to avoid detection.
RemControl Trojan Exploits Android Accessibility for Banking Fraud
PremiumRemControl banking trojan abuses Android Accessibility Service to take remote control and harvest banking credentials.
Emerging x47.c Botnet Utilizes AI to Drain API Credits
Premiumx47.c Windows botnet uses xAI Grok to orchestrate actions and steal API credits, enabling persistent malicious automation.
Friday, September 25
Groundbreaking AI Malware Uses Ensemble Models for Command Decisions
PremiumCisco Talos documents an autonomous AI C2 implant using ensemble-model voting to select malicious tasks and payloads.
Malicious Go Malware Distributed via Terraform Providers and Go Modules
PremiumThreat actors published malicious Terraform providers and Go modules to HashiCorp registry to distribute Go-based malware.
RemControl Trojan Exploits AI to Target Android Banking Apps
PremiumRemControl Android trojan uses AI-built overlays to steal banking PINs via fake download pages and Play Store lookalikes.
Konni Malware Campaign Targets Ukrainian Entities with Fake PDF Lures
PremiumKonni campaign uses fake PDF shortcut lures to deliver VelvetCake downloader targeting Ukrainian political and military organizations.
Get these articles delivered to your inbox.
Subscribe free