Hackers Poison Axios npm Package with 100 Million Weekly Downloads

Axios npm Package compromised in a supply chain attack, exposing developers to malware, data theft, and full system takeover risks worldwide.

·

Axios, Cyber Attack, cybersecurity, Malware, npm, Security, Supply Chain

¶¶¶¶¶

Tax Filing Scams Used to Deliver Malware in New Cybercrime Campaigns

Cybercriminals are once again exploiting global tax seasons, abusing IRS and tax filing lures to deliver malware, remote monitoring and management (RMM) tools, and credential phishing in a wave of new 2026 campaigns. Security researchers have already t…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

DeepLoad Malware Uses ClickFix and AI Evasion to Hit Enterprise Networks

New “DeepLoad” malware is turning a single user click into fileless, credential‑stealing persistence inside enterprise networks, leveraging the ClickFix technique and AI-generated obfuscation to evade traditional defenses. DeepLoad arrives via ClickFix…

·

AI, cyber security, Cyber Security News, Malware

¶¶¶¶¶

RoadK1ll Malware Turns Hacked Devices Into Network Relays

Hackers are deploying a new Node. js-based implant dubbed RoadK1ll to quietly turn compromised hosts into on-demand network relays, enabling stealthy pivoting deeper into victim environments without exposing obvious remote access tooling. The implant’s…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

CrySome RAT: Stealthy .NET Malware Adds AV Killer, HVNC Features

CrySome RAT is a newly observed, advanced .NET remote access trojan that combines full‑featured post‑exploitation tooling with unusually hardened persistence, AV-killing, and anti‑removal logic, making it a serious long‑term threat to Windows environme…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

TeamPCP Uses Fake Ringtone File in Tainted Telnyx SDK to Steal Credentials

Telnyx issues an urgent alert after hackers TeamPCP uploaded malicious versions (4.87.1 & 4.87.2) of its Python SDK to steal cloud and crypto credentials.

·

Cyber Attack, Cyber-Attacks, cybersecurity, Malware, Security, Supply Chain, TeamPCP, Telnyx, Trivy

¶¶¶¶¶

VoidLink Proves AI-Assisted Malware Is No Longer Experimental

VoidLink shows that AI-assisted malware is now a mature, operational tool rather than a lab experiment, compressing what once required a full team into days of work by a single developer. At the same time, threat actors are cautiously testing self-host…

·

AI, cyber security, Cyber Security News, Malware

¶¶¶¶¶

Fake Certificate Loader Hides BlankGrabber Malware Chain

BlankGrabber’s operators are now abusing a fake “certificate” loader to hide a multi‑stage Rust and Python infection chain, making this commodity stealer significantly harder to spot on Windows endpoints. The new technique relies on built‑in tools such…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

BianLian Ransomware Spreads via Fake Invoice SVG Images in New Attacks

Researchers at WatchGuard have identified a new phishing campaign targeting companies in Venezuela. Using malicious SVG image files…

·

BianLian, Cyber Attack, Cyber Crime, cybersecurity, Invoice, Malware, Phishing Scam, Ransomware, Security, SVG, Venezuela

¶¶¶¶¶

Hackers Deploy USB Malware, RATs, and Stealers in Southeast Asian Government Attacks

A multi-cluster cyberespionage operation in which attackers used USB-propagated malware, multiple RATs, loaders, and a custom stealer to target a Southeast Asian government organization between June and August 2025. Analysts initially observed USB-born…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

ADMIN.FOUNDATION

ADMIN.FOUNDATION

Category: Malware