Malware – Page 45 – ADMIN.FOUNDATION

North Korean APT37 Unleashes Novel Malware to Target Air-Gapped Systems

North Korean threat group APT37 is using a new multi‑stage toolset to jump air‑gaps and conduct deep surveillance by abusing removable media, Ruby, and cloud services in a campaign Zscaler ThreatLabz tracks as “Ruby Jumper.” The campaign’s main goal i…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New Aeternum C2 Botnet Evades Takedowns via Polygon Blockchain

Qrator Research Lab has identified Aeternum C2, a botnet that uses the Polygon blockchain for commands, making it nearly impossible to shut down.

·

Aeternum C2, Blockchain, Botnet, cybersecurity, DDOS, Malware, Polygon, Qrator, Security

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
ResidentBat Android Malware Grants Belarusian KGB Ongoing Mobile Access

ResidentBat is a custom Android spyware implant used by the Belarusian KGB to turn seized smartphones into long‑lived surveillance platforms against journalists and civil society targets. Operating outside the Play Store ecosystem and requiring hands‑o…

·

Android, cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
$300 a Month Android Malware ‘Oblivion’ Uses Fake Updates to Hijack Phones

Cybersecurity researchers at Certo reveal Oblivion, a new Android Trojan targeting major brands like Samsung and Xiaomi. It bypasses security to steal passwords and bank codes.

·

Android, Certo, Cyber Attack, cybersecurity, Google, Malware, Oblivion, Security

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New ZeroDayRAT Malware Claims Full Monitoring of Android and iOS Devices

Meet ZeroDayRAT, a newly advertised malware targeting Android and iOS devices with surveillance, location tracking, and crypto theft tools sold via Telegram as a MaaS service.

·

Anatsa, Android, cybersecurity, Cyberthint, iOS, MaaS, Malware, SCAM, Security, spyware, Telegram, ZeroDayRAT

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Use Steganographic Images to Bypass Anti-Malware and Deploy Malware

Hackers are abusing steganography in PNG images to smuggle a Pulsar Remote Access Trojan (RAT) into Windows systems through a malicious NPM package named buildrunner‑dev. The attack starts with a typosquatted NPM package, buildrunner‑dev, which imperso…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Fake Huorong Site Delivers ValleyRAT Backdoor in Targeted Malware Campaign

A typosquatted copy of the popular Huorong Security antivirus site is being used to deliver ValleyRAT, a modular remote access trojan (RAT) built on the Winos4.0 framework, to users who believe they are downloading legitimate protection software. The a…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
GrayCharlie Hacks WordPress Sites, Spreads NetSupport RAT and Stealc Malware

GrayCharlie is abusing compromised WordPress sites to silently load malicious JavaScript that pushes NetSupport RAT, often followed by Stealc and SectopRAT, via fake browser updates and ClickFix lures. Insikt Group tracks GrayCharlie as a financially m…

·

cyber security, Cyber Security News, Malware, Word press

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Use Excel Exploit to Hide XWorm 7.2 in JPEG Files, Hijack PCs

A new phishing campaign is spreading XWorm 7.2 via malicious Excel files, hiding the malware in Windows processes, and using AES encryption to steal passwords and Wi-Fi keys.

·

Cyber Attack, cybersecurity, Excel, Invoice, Malware, Phishing, Phishing Scam, RAT, SCAM, Security, Windows, XWorm

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Silver Fox APT Deploys DLL Sideloading and BYOVD in Advanced Malware Campaign

Silver Fox APT is running a new wave of targeted attacks in Taiwan that combine DLL sideloading and Bring Your Own Vulnerable Driver (BYOVD) techniques to deploy Winos 4.0 (ValleyRat) while aggressively disabling security tools. The campaigns rely on h…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

Category: Malware