Malware – Page 18 – ADMIN.FOUNDATION

Weedhack MaaS Targets Minecraft Players to Steal Credentials and Hijack Accounts

Weedhack, a Malware-as-a-Service (MaaS) operation specifically engineered to prey on Minecraft players, that has been active since at least January 2026. The service packages credential theft, cryptocurrency wallet extraction, account hijacking and ful…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
NFCShare Android Malware Spreads via Weaponized Banking Apps

A renewed and operationally refined wave of the NFCShare Android banking trojan that delivers NFC card-data theft by masquerading as legitimate banking applications. First documented in January 2026, NFCShare continues to rely on a social‑engineering p…

·

Android, cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Shai-Hulud Malware Campaign Abuses 23 PyPI Packages in Developer-Focused Attack

A rapidly evolving supply chain campaign dubbed “Shai-Hulud” is targeting developers through malicious Python packages. Researchers have identified 23 newly weaponised PyPI artefacts, expanding the scope of the ongoing Mini Shai-Hulud, Miasma, and Hade…

·

cyber security, Cyber Security News, Malware, Python

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
WhatsApp Says It Blocked Pegasus Spyware Campaign Linked to NSO

WhatsApp says it blocked Israeli firm NSO’s Pegasus spyware activity and is asking a US court to treat the targeting as an injunction breach.

·

Cyber Attack, Cyber Crime, cybersecurity, FACEBOOK, Israel, Laws & Legalities, Malware, Meta, NSO, Pegasus, spyware, WhatsApp

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Operation FlutterBridge Uses Fake Google Ads to Spread macOS Backdoor

Operation FlutterBridge uses fake Google ads and shell companies to deploy FlutterShell, a new macOS backdoor targeting unsuspecting users.

·

backdoor, Cyber Attack, cybersecurity, Google ads, macOS, Malvertising, Malware, Operation FlutterBridge, SCAM, Scams and Fraud, Security

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Clone Ghidra, dnSpy and Other Tool Sites to Spread Malware

Hackers are cloning Ghidra, dnSpy, ILSpy and other free tool sites to spread Malware like RemusStealer, crypto clippers and loaders through fake downloads.

·

AnimateClipper, CrystalDiskMark, Cyber Attack, cybersecurity, dnSpy, GHIDRA, ILSpy, Malware, RemusStealer, Scams and Fraud, Security, SessionGate

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Miasma Malware Hits 32 Red Hat Packages via Compromised GitHub Account

32 Red Hat npm packages compromised by Miasma malware expose cloud tokens, CI/CD secrets and developer credentials in supply chain attack.

·

Cyber Attack, cybersecurity, Data Breaches, GitHub, Malware, Miasma, npm, Red Hat, Security, vulnerability

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Weaponize Trusted Tools to Deploy Notorious Malware

Attackers are leaning harder on legitimate, preinstalled, or widely used system tools to deliver and operate notorious malware families, creating a stealthy, high-velocity threat that outpaces many traditional defenses. The operational logic for attack…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Reaper macOS Infostealer Abuses Script Editor to Steal Crypto and Passwords

Threat actors are deploying an updated SHub Stealer variant named Reaper that exploits the native macOS Script Editor to bypass OS-level protections and compromise cryptocurrency assets.

·

ClickFix, Crypto, Infostealer, macOS, Malware, Password, Reaper, Script Editor, Security, SHub Stealer, WeChat

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New Magecart Attack Abuses Stripe as Malware C2

A novel Magecart campaign that weaponizes legitimate cloud services to evade detection: attackers are storing a JavaScript skimmer inside Stripe customer metadata and delivering it to victim checkouts via Google Tag Manager. The combination makes Strip…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

Category: Malware