Hackers Use PyInstaller and AMSI Patching to Deliver XWorm RAT v7.4

Hackers are hiding XWorm malware in PyInstaller files to bypass Windows security, steal data and remotely control devices through ads.

·

AMSI, Cyber Attack, cybersecurity, Malware, Point Wild, PyInstaller, RAT, Scams and Fraud, Security, XWorm, XWorm 7.4

¶¶¶¶¶

Microsoft Warns HPE Operations Agent Abused in Malware-Free Attacks

Microsoft has revealed a stealthy intrusion campaign where attackers bypassed traditional malware and exploits, instead abusing trusted enterprise tools to silently infiltrate networks. The technique highlights a growing shift in cyberattacks where adv…

·

cyber security, Cyber Security News, Malware, Microsoft

¶¶¶¶¶

Microsoft Exposes Kazuar Malware’s Modular P2P Botnet Architecture

Microsoft has revealed new technical insights into Kazuar, a long-running malware linked to the Russian state-backed group Secret Blizzard, highlighting its evolution into a stealthy, modular peer-to-peer (P2P) botnet designed for persistent cyber espi…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Fake Job Interview Apps Drop JobStealer Malware on Windows and macOS

Hackers are using Fake interview apps to spread JobStealer malware on macOS and Windows to steal crypto wallets, browser data, and passwords.

·

Cyber Attack, cybersecurity, Fraud, Interview, JobStealer, macOS, Malware, SCAM, Scams and Fraud, Security, Telegram, Windows

¶¶¶¶¶

FamousSparrow Targeted Oil and Gas Industry via MS Exchange Server Exploit

Bitdefender Labs reveals how the China-linked FamousSparrow hacking group targeted an Azerbaijani energy firm using ProxyNotShell, Deed RAT,…

·

Azerbaijan, China, Cyber Attack, Cyber-Attacks, cybersecurity, FamousSparrow, Malware, Microsoft, MS Exchange, Oil and Gas, Security

¶¶¶¶¶

New Malware Framework Enables Screen Control and UAC Bypass

A sophisticated malware framework capable of screen control, browser artifact access, and User Account Control (UAC) bypass, highlighting how attackers are increasingly adapting open-source tools for real-world intrusions. The attack chain revealed a c…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

TeamPCP Used Mini Shai-Hulud Worm to Poison Over 400 npm and PyPI Packages

Research reveals that TeamPCP hijacked OIDC tokens to poison hundreds of TanStack, Mistral AI, and UiPath packages with the self-propagating Mini Shai-Hulud worm.

·

Cyber Attack, Malware, Mini Shai-Hulud, npm, PyPI, Security, Supply Chain, TeamPCP

¶¶¶¶¶

Infostealer Malware Fuels Corporate Breaches From Personal Devices

Infostealer malware is no longer just a consumer nuisance it has become a direct bridge between personal device infections and full-scale enterprise breaches. Once these credentials are harvested and posted on dark web forums, attackers gain immediate …

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Fake FinalShell and Xshell Sites Push Kong RAT Malware

Hackers are abusing fake download sites for popular tools like FinalShell and Xshell to deliver a new remote access trojan known as Kong RAT, in a highly staged and stealthy campaign that ran from at least May 2025 through March 2026. In this campaign,…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Fake Claude Code Installer Targets Developers With Browser Credential Stealer

Researchers at Ontinue have discovered an undocumented malware campaign targeting developers with fake Claude Code installers to steal browser passwords and cookies.

·

AI, Claude, Claude Code, cybersecurity, Fraud, Google, Malware, Ontinue, SCAM, Security

¶¶¶¶¶

ADMIN.FOUNDATION

ADMIN.FOUNDATION

Category: Malware