Intrusions
Malware
13 Intrusions stories since Aug 2025.
- 13
- stories
- OCT 15
- latest
The Odyssey and Infosec: How We Got From Zeus’s Law to Zero Trust
Nolan casts the invention of the Trojan horse as the ultimate violation of “Zeus’s law,” the idea that you should treat any stranger you encounter with kindness and respect, because they could very well be Zeus in disguise.
SUSANNAH CLARK MATT · OCT 15 · 5 min
All Intrusions · Malware
Chinese APT UAT-7810 Expands Malware Arsenal
The investigation into UAT-7810 shows significant evolution in their toolkit, specifically the development of a successor to their previously documented SHORTLEASH backdoor.
Dennis Fisher · 2 min
Evil Is as Evil Does: New EvilTokens Affiliate Panel Uncovered
This new ARToken operator panel has a clear lineage going back to the EvilTokens framework, which emerged in early 2026.
Dennis Fisher · 2 min
New Turla Stockstay Backdoor Emerges
Known historically for its tight ties to Russia’s FSB and its development of the Snake implant, Turla has leveraged STOCKSTAY to target sensitive government and military organizations.
Dennis Fisher · 2 min
Supply Chain Attack Hits Axios NPM Packages
Axios is a dependency in nearly 80% of all cloud and code environments and sees approximately 100 million downloads per week.
Dennis Fisher · 4 min
Microsoft Uncovers New Malicious Campaign Targeting Developers
This campaign is an offshoot of the more familiar and pervasive fake job interview and phony tech worker scams that have been coming from North Korea for several years.
Dennis Fisher · 3 min
Google Disrupts IPIDEA Residential Proxy Network
Google researchers observed more than 550 individual threat groups using IPIDEA exit nodes during a one-week period earlier this month.
Dennis Fisher · 3 min
New Shai Hulud NPM Worm Emerges
Researchers from Wiz are currently tracking more than 25,000 affected repositories across approximately 350 unique users.
Dennis Fisher · 2 min
Cisco Warns of Attacks on Two ASA Flaws
Cisco’s Talos threat intelligence team said this campaign is the work of an actor it tracks as UAT4356, an APT team that has previously targeted ASA devices.
Dennis Fisher · 3 min
Three Takeaways From the EU Airport Outages
The incident is a pointed example of how an intrusion at a key point in the software supply chain can have a wide range of downstream effects.
Dennis Fisher · 2 min
New PXA Stealer Campaign Hits Victims Worldwide
A group of attackers with ties to the Vietnamese cybercrime underground ecosystem are running a significant campaign across many different countries that is delivering the PXA Stealer malware and uses novel sideloading and anti-analysis techniques to slip past defensive measures. The campaign has targeted victims in more than 60 countries and the attackers have harvested…
Dennis Fisher · 2 min
