Malware Archives - Ady DeeJay

Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery

April 21, 2025

by Ady DeeJay

Comments (0)

Apr 21, 2025Ravie LakshmananVulnerability / Threat Intelligence Cybersecurity researchers have disclosed a surge in “mass scanning, credential brute-forcing, and exploitation attempts” originating from IP addresses associated with a Russian bulletproof hosting service provider named Proton66. The activity, detected since January 8, 2025, targeted organizations worldwide, according to a two-part analysis

Python Malware Disguised as Coding Challenges

April 15, 2025

by Ady DeeJay

Comments (0)

The North Korea-linked threat actor assessed to be behind the massive Bybit hack in February 2025 has been linked to a malicious campaign that targets developers to deliver new stealer malware under the guise of a coding assignment. The activity has been attributed by Palo Alto Networks Unit 42 to

March 30, 2025

by Ady DeeJay

Comments (0)

Mar 30, 2025Ravie LakshmananVulnerability / Zero-Day The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has shed light on a new malware called RESURGE that has been deployed as part of exploitation activity targeting a now-patched security flaw in Ivanti Connect Secure (ICS) appliances. “RESURGE contains capabilities of the SPAWNCHIMERA malware

March 5, 2025

by Ady DeeJay

Comments (0)

Mar 05, 2025Ravie LakshmananOpen Source / Malware Cybersecurity researchers are alerting of an ongoing malicious campaign targeting the Go ecosystem with typosquatted modules that are designed to deploy loader malware on Linux and Apple macOS systems. “The threat actor has published at least seven packages impersonating widely used Go libraries,

Silver Fox APT Uses Winos 4.0 Malware in Cyber Attacks Against Taiwanese Organizations

February 27, 2025

by Ady DeeJay

Comments (0)

Feb 27, 2025Ravie LakshmananMalware / Threat Intelligence A new campaign is targeting companies in Taiwan with malware known as Winos 4.0 as part of phishing emails masquerading as the country’s National Taxation Bureau. The campaign, detected last month by Fortinet FortiGuard Labs, marks a departure from previous attack chains that

Malware Bypasses Google Chrome App-Bound Encryption

February 6, 2025

by Ady DeeJay

Comments (0)

Cyble researchers have discovered a sophisticated malware attack that uses dual injection techniques to bypass Google Chrome’s App-Bound Encryption. Chrome App-Bound Encryption was introduced last year to protect cookies from infostealer malware, so attacks that bypass that protection could potentially access user accounts and other sensitive information. In a blog

December 14, 2024

by Ady DeeJay

Comments (0)

Dec 14, 2024Ravie LakshmananBotnet / Ad Fraud Germany’s Federal Office of Information Security (BSI) has announced that it has disrupted a malware operation called BADBOX that came preloaded on at least 30,000 internet-connected devices sold across the country. In a statement published earlier this week, authorities said they severed the

September 24, 2024

by Ady DeeJay

Comments (0)

Sep 24, 2024Ravie LakshmananMobile Security / Malware Altered versions of legitimate Android apps associated with Spotify, WhatsApp, and Minecraft have been used to deliver a new version of a known malware loader called Necro. Kaspersky said some of the malicious apps have also been found on the Google Play Store.

Cyberattackers Exploit Google Sheets for Malware Control in Likely Espionage Campaign

August 30, 2024

by Ady DeeJay

Comments (0)

Cybersecurity researchers have uncovered a novel malware campaign that leverages Google Sheets as a command-and-control (C2) mechanism. The activity, detected by Proofpoint starting August 5, 2024, impersonates tax authorities from governments in Europe, Asia, and the U.S., with the goal of targeting over 70 organizations worldwide by means of a

NGate Android malware relays NFC traffic to steal cash

August 22, 2024

by Ady DeeJay

Comments (0)

ESET researchers uncovered a crimeware campaign that targeted clients of three Czech banks. The malware used, which we have named NGate, has the unique ability to relay data from victims’ payment cards, via a malicious app installed on their Android devices, to the attacker’s rooted Android phone. Key points of

Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery

Crypto Developers Targeted by Python Malware Disguised as Coding Challenges

RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features

Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems

Silver Fox APT Uses Winos 4.0 Malware in Cyber Attacks Against Taiwanese Organizations

Malware Bypasses Google Chrome App-Bound Encryption

Germany Disrupts BADBOX Malware on 30,000 Devices Using Sinkhole Action

Necro Android Malware Found in Popular Camera and Browser Apps on Play Store

Cyberattackers Exploit Google Sheets for Malware Control in Likely Espionage Campaign

NGate Android malware relays NFC traffic to steal cash

Recent Posts

Recent Comments

Categories

Archives

Recent Posts

Recent Comments

Categories

Archives

Tags