Malware & Threats
The Rust-based macOS infostealer harvests users’ passwords, keychain information, Chromium-based browser data, and Safari cookies.
Hi, what are you looking for?
SecurityWeek
All posts tagged "malware"
Malware & Threats
The malware was designed to steal and exfiltrate secrets, and to propagate itself via stolen NPM and GitHub credentials.
Malware & Threats
The malware-as-a-service operation launches legitimate browsers on an invisible desktop, giving attackers persistent and covert remote access to compromised Windows systems.
Artificial Intelligence
SentinelOne’s new benchmark, built on the Fast16 case, shows which AI models can sustain a malware investigation and which cannot.
Malware & Threats
Part of a larger toolkit, HollowGraph uses a compromised 365 account’s calendar as a two-way dead-drop.
Malware & Threats
The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533.
Malware & Threats
The new macOS malware has targeted at least 100 users to steal their passwords and cryptocurrency.
Endpoint Security
Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint security products.
Malware & Threats
The backdoor’s destructive capabilities include a standalone wiper, ransomware encryption, and a multi-pass wiping command.
Malware & Threats
A Go module is used to load PowerShell code that fetches a resolver from public dead drops to execute Windows malware.
Malware & Threats
The threat actor is focused on collecting credentials, SSH keys, cryptocurrency wallets, and development tooling.
Malware & Threats
Turla has been using the backdoor against government and military organizations in Ukraine for espionage.
Cybercrime
Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies.
Malware & Threats
Mistic is used by Woodgnat, an initial access broker working with Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta.
Malware & Threats
CryptoBandits uses a local SOCKS5 proxy for traffic routing, blending data theft with remote code execution.
Malware & Threats
The attackers deployed a new Go-based backdoor that uses Microsoft Teams servers for command-and-control.
Cybercrime
Researchers say the OnyxC2 malware targets more than 200 applications and extensions while evading detection through encrypted payloads, DLL sideloading, and in-memory execution techniques.
ICS/OT
A PowerShell script included in patch files appears to be triggering false positives by multiple security engines.
Identity & Access
As attackers increasingly favor stolen credentials over exploits, infostealers have become a primary source of access for ransomware and other cybercrime operations.
Artificial Intelligence
Researchers warn GreyVibe’s extensive use of ChatGPT, Gemini, and other AI tools offers a glimpse into how future cybercriminal and state-aligned groups will operate.
Vulnerabilities
CVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.
Artificial Intelligence
Artificial Intelligence
Vulnerabilities
Exploitation of the Zimbra Collaboration vulnerability CVE-2026-73570 has been observed by Poland’s CERT Polska.
Vulnerabilities
