Tag
Malware
24 stories since Aug 2025.
- 24
- stories
- OCT 15
- latest
The Odyssey and Infosec: How We Got From Zeus’s Law to Zero Trust
Nolan casts the invention of the Trojan horse as the ultimate violation of “Zeus’s law,” the idea that you should treat any stranger you encounter with kindness and respect, because they could very well be Zeus in disguise.
SUSANNAH CLARK MATT · OCT 15 · 5 min
All Malware
New SparroWocky Backdoor Targets Latin America
Active since at least August 2025, the malware represents a functional pivot from the threat actor’s existing SparrowDoor backdoor.
Dennis Fisher · 3 min
US, UK Agencies Detail Iranian Malware Campaign Targeting Dissidents
A new joint advisory from multiple law enforcement agencies this week warned of an Iranian cyber campaign targeting dissidents and journalists in the U.S., UK, and elsewhere.
Lindsey O'Donnell-Welch · 2 min
New Campaign Weaponizes Microsoft Teams for Remote Access
Unlike standard commodity malware that aims for quick credential theft, this campaign features a manual, hands-on-keyboard scheme designed to escalate rapidly from a single compromised workstation to broad, network-wide access.
Dennis Fisher · 2 min
Chinese APT UAT-7810 Expands Malware Arsenal
The investigation into UAT-7810 shows significant evolution in their toolkit, specifically the development of a successor to their previously documented SHORTLEASH backdoor.
Dennis Fisher · 2 min
Evil Is as Evil Does: New EvilTokens Affiliate Panel Uncovered
This new ARToken operator panel has a clear lineage going back to the EvilTokens framework, which emerged in early 2026.
Dennis Fisher · 2 min
New Turla Stockstay Backdoor Emerges
Known historically for its tight ties to Russia’s FSB and its development of the Snake implant, Turla has leveraged STOCKSTAY to target sensitive government and military organizations.
Dennis Fisher · 2 min
Targeting Cybercrime ‘Assembly Lines:’ Europol Announces Malware Crackdown
As part of the takedown, SocGholish infrastructure tied to fake browser-update scams was heavily impacted, including remediation of nearly 15,000 compromised WordPress sites.
Lindsey O'Donnell-Welch · 2 min
macOS Gaslight Backdoor Weaponizes Prompt Injection Against Security Analysts
Gaslight is a Rust-based backdoor that researchers from SentinelOne have attributed to DPRK-aligned threat actors.
Dennis Fisher · 3 min
Stealthy Deep#Door Stealer Targets Windows Machines, Credentials
Deep#Door stealer is being used in intrusions targeting Windows machines, using an obfuscated deployment chain.
Dennis Fisher · 3 minSupply Chain Attack Hits Axios NPM Packages
Axios is a dependency in nearly 80% of all cloud and code environments and sees approximately 100 million downloads per week.
Dennis Fisher · 4 min
Microsoft, Europol Disrupt Tycoon 2FA Phishing Service
The comprehensive effort, which involved seizing 330 active domains, cuts off a critical pipeline for account takeovers that targeted over 500,000 organizations and sent tens of millions of fraudulent emails monthly.
Dennis Fisher · 3 min
Microsoft Uncovers New Malicious Campaign Targeting Developers
This campaign is an offshoot of the more familiar and pervasive fake job interview and phony tech worker scams that have been coming from North Korea for several years.
Dennis Fisher · 3 min
Google Disrupts IPIDEA Residential Proxy Network
Google researchers observed more than 550 individual threat groups using IPIDEA exit nodes during a one-week period earlier this month.
Dennis Fisher · 3 min
Microsoft Disrupts RedVDS Cybercrime Platform
The takedown marks a significant blow to the cybercrime-as-a-service ecosystem, which fuels large-scale, automated fraud.
Dennis Fisher · 3 minNew MuddyWater Campaign Hits Israeli Targets
The victims in Israel span multiple industries, including technology, engineering, manufacturing, local government, and education.
Dennis Fisher · 2 min
New Shai Hulud NPM Worm Emerges
Researchers from Wiz are currently tracking more than 25,000 affected repositories across approximately 350 unique users.
Dennis Fisher · 2 min
Data Connects Scanning Surges for Cisco, Fortinet, PAN Devices
Researchers say that all three campaigns are being driven at least in part by one threat actor.
Dennis Fisher · 1 min
