Browsing Tag
Malware
2358 posts
Ukrainian Conti Ransomware Member Gets Four Years in US Prison
Ukrainian national Oleksii Lytvynenko gets four years in US prison for his role in the Conti ransomware operation, which targeted over 1,000 victims.
Trellix Details DarkSword, JSCeal, Axios npm Attack and APT28 Campaigns
DarkSword, JSCeal, Axios, Bitter APT, and APT28 campaigns reveal evolving tactics targeting iPhones, Southeast Asia, software supply chains, diplomatic organizations, and European governments.
Fake Sexual Misconduct Emails Target Universities with Zoho RAT
Cofense details a phishing campaign targeting healthcare-linked universities through Google Drive links that lead recipients to install Zoho RAT.
F5 BIG-IP APM Linux Malware Hides PHP Web Shell in Apache Memory
Sophos found Linux malware targeting F5 BIG-IP APM that injects a PHP web shell into Apache memory, helping attackers evade file-based detection.
Toy Ghouls Targets Russian Organizations With New Windows Backdoors
Kaspersky found 2 custom Toy Ghouls backdoors that use HiveMQ MQTT and an attacker-controlled Element server to execute commands on Windows systems.
F6 Threat Report Tracks 600 Million Records Across 164 Database Leaks
F6 tracked 164 database leaks exposing more than 600 million records across underground forums and Telegram in 2025 and the first half of 2026.
Sality Botnet Linked to 11 Million IPs Disrupted After 23 Years
US and European authorities disrupted the long-running Sality botnet, using P2P sinkholing to cut infected Windows systems off from its operator.
‘Spring Ring’ Vishing Attack Uses Fake IT Calls on Microsoft Teams to Install Malware
A new Teams vishing campaign called Spring Ring used fake IT support calls to trick employees into installing remote-access tools (RAT) and malware.
Facebook Ads Promote Fake Streaming Apps Delivering PanDa RAT
Intel 471 says Chinese-speaking operators used fake streaming apps and Facebook ads to infect Android users with the PanDa RAT (remote access trojan).
China-Nexus Fire Ant Hackers Target Cisco Routers, TACACS Servers for Espionage
Sygnia details Fire Ant attacks on Cisco routers, TACACS servers and Linux hosts used to steal credentials, collect traffic data and conceal malicious activity.