OctLurk and SilkLurk Windows Backdoors Target Governments in 6 Countries

Kaspersky links OctLurk and SilkLurk to cyberespionage attacks stealing passwords, emails and files from government systems in six countries since January 2025.

·

Afghanistan, backdoor, Central Asia, China, Cyber-Attacks, Kaspersky, Linux, LurkProxy, Malware, MystRodX, OctLurk, PlugX, Security, SilentRaid, SilkLurk, Syria, TrustFall, Windows, WinRAR

¶¶¶¶¶

Four Million Malware Reports Reveal a Widespread No-DNS C2 Blind Spot

A long‑running supply chain compromise of the QuickFox VPN accelerator that quietly delivered an FDMTP backdoor to carefully profiled Windows systems, exposing a major blind spot in defenders’ visibility where command‑and‑control (C2) traffic never tou…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Ransomware Hackers Are Hiding Malware Command Servers Inside Ethereum Smart Contracts

Ransomware operators are now abusing Ethereum smart contracts as stealthy command‑and‑control resolvers, with a Gentlemen ransomware affiliate using the EtherRAT backdoor to pull rotating C2 domains directly from the blockchain instead of hardcoding th…

·

cyber security, Cyber Security News, Malware, Ransomware

¶¶¶¶¶

Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages

Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI credentials in real time.

·

Cyber Attack, Cyber-Attacks, cybersecurity, Malware, npm, Security, Shai-hulud, Supply Chain, Worm

¶¶¶¶¶

Airlock Digital Unveils Agentic AI Control & Governance to Extend Preventative Endpoint Security

Atlanta, GA, 4th August 2026, CyberNewswire

·

Malware, Press Release, Product Launch

¶¶¶¶¶

H96 Android TV Boxes Used for Ad Fraud and Residential Proxies

Bitsight found Fuyao software on H96 Android TV boxes, letting operators fake ad clicks and route proxy traffic through their owners’ home internet connections.

·

Android, Android TV, Backdoors, BitSight, cybersecurity, Fuyao, H96, Malware, proxy, residential proxy, Security

¶¶¶¶¶

Wordfence Finds Critical Backdoor in ARVE WordPress Plugin

A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.

·

ARVE, backdoor, cybersecurity, Malware, Plugin, Security, vulnerability, Wordfence

¶¶¶¶¶

ClickFix Campaign Uses EtherHiding to Hide Malware and Exposes DPRK Wallet Trail

ClickFix-style fake macOS updates are now being weaponized with EtherHiding-backed command‑and‑control and a DPRK-linked crypto laundering network, turning a routine search click into a full-stack theft operation spanning browser, endpoint, blockchain,…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Astaroth Banking Trojan Adds WhatsApp Web Spambot to Spread Malware Across Brazil

Astaroth operators have expanded their Brazilian banking malware operations by weaponizing a new WhatsApp Web spambot module that turns infected hosts into automated malware relays, marking a significant evolution of the LATAM e-crime ecosystem. Tradit…

·

cyber security, Cyber Security News, Malware, WhatsApp

¶¶¶¶¶

AtlasRAT Uses Four-Stage In-Memory Loader to Keylog and Inject Malware Into WeChat

AtlasRAT is a modular Windows remote access trojan that uses a four-stage, fully in-memory loader chain to quietly establish TLS‑ and ChaCha20‑protected command-and-control, log keystrokes offline. If inject malicious DLLs into WeChat, effectively turn…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

ADMIN.FOUNDATION

ADMIN.FOUNDATION

Category: Malware