特別定額給付金を装ったAndroidマルウェア
hxxps://hasoadwaznqps.com/transtioncash/
hxxps://hhmjjdfwzx.com/transtioncash/
hxxps://poiwaldsas.com/transtioncash/
hxxps://posidwaksd.com/transtioncash/
www.virustotal.com/gui/file/7c7...
#Phishing #フィッシング詐欺 #malware

特別定額給付金を装ったAndroidマルウェア
hxxps://hasoadwaznqps.com/transtioncash/
hxxps://hhmjjdfwzx.com/transtioncash/
hxxps://poiwaldsas.com/transtioncash/
hxxps://posidwaksd.com/transtioncash/
www.virustotal.com/gui/file/7c7...
#Phishing #フィッシング詐欺 #malware
e-Taxを装ったAndroidマルウェア
hxxps://worldprimenew-jp.com/
www.virustotal.com/gui/file/1f6...
#Phishing #フィッシング詐欺 #malware
A new ransomware strain named 'Altair' has been discovered targeting Windows. It uses a double-extortion model, exfiltrates data, and leverages WMI for stealth. Victims are given a 72-hour deadline. #Ransomware #Altair #CyberSecurity #Malware
🌐 cyber[.]netsecops[.]io
Hackers Don’t Need to Break Into the Cloud When They Can Steal the Keys
https://commons.now/link/hackers-dont-need-to-break-into-the-cloud-when-they-can-steal-the-keys
231589 malicious packages caught and counting. Every one was read statically, never executed.
📈 Our week: 67 malicious packages flagged across the ecosystems, npm the hottest, typically 0 days before the advisory landed.
⏱ 2 days of lead time on npm [email protected]: we flagged it, then MAL-2026-17215 confirmed it.
@microsoft.com
Modular post-compromise malware enables stealthy persistence and C2 via DLL sideloading.
-
IOCs: corp[.]tripswithengine[.]com, e842dd7642c8e04b5ec20b6393848a9c904e4832930950c16664fe7800ba382e
-
#ChinaAligned #Malware #ThreatIntel
When #cyberattackers were moving at human speed delays were already a problem. As #AI increasingly allows attacks to operate at machine speed, businesses & consumers can no longer assume they will have time on their side. Turn to us for aid with #ransomware, #malware, #phishing #cybercrime, & #fraud
Konnten die Server wieder hochgefahren werden?
Server am Samstagmorgen herunterfahren: #Kiteworks warnt Admins vor #ZeroDay | Security https://www.heise.de/news/Bevorstehender-Zero-Day-Angriff-KiteWorks-draengt-Kunden-zur-Serverabschaltung-11466114.html #malware #Ransomware #exploit
New discovery: NeedyMantis malware gives covert post-breach access via DLL sideloading & custom C2. #NeedyMantis #Malware #Potatosecurity #PostCompromise #ThreatIntel #NetworkSecurity thedailytechfeed.com/microsoft-un...
New discovery: NeedyMantis malware gives covert post-breach access via DLL sideloading & custom C2. #NeedyMantis #Malware #Cybersecurity #PostCompromise #ThreatIntel #NetworkSecurity thedailytechfeed.com/microsoft-un...
Volatility 3 malfind spots injected code: it walks each process VAD tree, flags PAGE_EXECUTE_READWRITE regions not backed by disk, then disassembles page https://www.valtersit.com/vault/identify-injected-code-and-shellcode-memory-pages-using-malf-4644e9/
#volatility3 #malware-analysis #ValtersIT
ClickFix scams dominate Mac malware delivery; stealers now linger with backdoors and clever hiding tricks. #MacSecurity #ClickFix #Malware #Stealers #ThreatLandscape #Cybersecurity https://thedailytechfeed.com/mac-malware-shift-clickfix-stealers-get-sneakier-in-september/
Compromised Site -> #ClickFix
Malicious URL:
hxxps://raw.githubusercontent.com/om5678774/kt4567/main/landing2.txt
urlscan.io/search/#file...
#malware
Compromised Site -> #ClickFix
Malicious Domain:
cove-koi-hk753[.]xyz
urlscan.io/search/#cove...
#malware
Python MaaS infostealer steals passwords/cards/cookies across 17 browsers, evades detection quietly. #Infostealer #Malware #Python #Cybersecurity #InfoSec #MaaS https://thedailytechfeed.com/python-maas-infostealer-targets-17-browsers-with-credential-cookie-theft/
Discover how the Psychedelic Stealer malware uses fake Cloudflare CAPTCHA ClickFix lures to infect computers and steal passwords and cryptocurrency.
#PsychedelicStealer #ClickFix #CyberSecurity #Malware #Cloudflare
📰 ShinyHunters Gunakan Teknik Bypass WAF untuk Kembali Mengeksploitasi Oracle PeopleSoft
👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/28/shinyhunters-bypass-waf-oracle-peoplesoft/
#cve #cybersecurity #dataBreach #exploit #keamananSiber #malware #oracle #peoplesoft #shinyhunt
📰 GitHub Actions Kembali Diaktifkan Saat Payload Mini Shai-Hulud Masih Aktif
👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/28/github-actions-mini-shai-hulud-payload-malware/
#ci/cd #cybersecurity #developerSecurity #github #githubActions #keamananSiber #malware #miniShai-hulu