Malware – ADMIN.FOUNDATION

Hackers Exploit DLL Sideloading in Signed OpenAI and Anthropic Binaries to Deploy YobaLoader Malware

A campaign tracked as Yoba abuses interest in generative AI to push cryptocurrency-mining malware through fake GitHub projects. Check Point Research published its findings on October 27, 2026, after about two months of tracking. The operators pair legi…

·

cyber security, Cyber Security News, Malware, OpenAI

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
DarkBlinders APT Hackers Target Israel and Iraqi Kurdistan With StarkMeet Malware and GitHub-Based Backdoors

DarkBlinders has compromised a high-profile Israeli individual associated with the security sector and a government cloud environment in Iraqi Kurdistan, combining credential phishing, a fake meeting application, and GitHub-based backdoors. Dream Secur…

·

cyber security, Cyber Security News, GitHub, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Hide PapRAT Malware in Fake Diplomatic Invitations to Take Control of Windows Systems

A campaign by the BITTER threat group that delivers a custom remote access trojan (RAT) called PapRAT to South Asian organizations. FortiGuard attributes the activity to the group with high confidence, based on lure filenames, command-and-control (C2) …

·

cyber security, Cyber Security News, Malware, Windows

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Google Dismantles XCPE Botnet That Infected 1.3 Million Android TV Devices With Preinstalled Malware

Google and industry partners have dismantled the XCPE botnet. This firmware-level backdoor enrolled more than 1.3 million Android set-top boxes. Google Threat Intelligence Group (GTIG) assesses with high confidence that Android OEM and ODM Videostrong …

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
BITTER APT Using Fake Diplomatic Documents to Deliver PapRAT Spyware

FortiGuard Labs links BITTER to cyberespionage attacks on South Asian organizations using malicious Windows shortcuts, PowerShell scripts, and PapRAT malware.

·

Bitter APT, Cyber Attack, Cyber-Attacks, cybersecurity, LOTL, Malware, PapRAT, Phihing, Security, South Asia

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Pushing Remote Access Tool Through Fake Adobe Acrobat Pages

Fake Adobe Acrobat pages distribute signed ScreenConnect installers configured for attacker-controlled remote access to Windows PCs, CloudSEK’s researchers say.

·

Adobe Acrobat, CloudSEK, ConnectWise, cybersecurity, Malware, Scams and Fraud, ScreenConnect, Security, Windows

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Fake GitHub Repo Tricks AI Agents Into Installing SolanaCry Malware

A fake GitHub repository tricks AI coding agents into installing SolanaCry malware, giving attackers remote access to developers’ Windows PCs through NetSupport.

·

AI Agents, AI Coding Agents, Blockchain, Crypto, GitHub, Malware, NetSupport, Security, Solana, SolanaCry

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Cisco Talos Uncovers KeyDrift Malware Targeting SD-WAN Controllers to Steal Network Encryption Keys

UAT-11473, an advanced persistent threat actor deploying KeyDrift, a custom malware framework targeting Cisco Catalyst SD-WAN controllers. The framework embeds inside legitimate control-plane processes to maintain access, intercept decrypted communicat…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
INJ3CTOR3 Malware Steals FreePBX Credentials to Enable Fraudulent Calls Even After Server Cleanup

INJ3CTOR3 has expanded its FreePBX toll-fraud campaign with automated credential theft, letting attackers keep billing unauthorized calls to victims even after infected servers are cleaned. September 2026 artifacts described in the supplied research sh…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Reuse XWorm Malware Loader Across Phishing Campaigns Targeting Colombia and the UK

A judicial-themed phishing campaign targeting Colombian organizations that delivers XWorm through obfuscated scripts, encrypted PowerShell, and a reusable .NET loader. The recovered loader is binary-identical to one documented in a September 10, 2026, …

·

cyber security, Cyber Security News, Malware, Phishing

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

Category: Malware