TASK#STOMP backdoor steals files, Wi-Fi, clipboard via stealthy PowerShell & scheduler misuse. #Malware #PowerShell #Security #EndpointSecurity #DataExfiltration #ThreatIntel thedailytechfeed.com/powershell-b...

Big threats: Cisco ISE zero-day, Plugin4Shell RCE, Brevo ClickFix takeover. #AI #Plugin4Shell #Security #CyberThreats #Malware #ZeroDay thedailytechfeed.com/top-cyber-th...

North Korean Fake Recruiters Infect 30,000 Devices, Steal $10.7M in Crypto

https://newisty.com/blog/north-korean-fake-recruiters-infect-30000-devices-steal-107m-in-crypto?utm_source=social&utm_campaign=crypto_news

#northkorea #crypto #malware

The npm package “indexed-btree” hides malware at runtime, bypassing install checks and weaponizing BTree.prototype.set. #SupplyChain #npm #Malware #NodeJS #RuntimeThreat #Security thedailytechfeed.com/npm-supply-c...

The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files

🔗 Read more: www.helpnetsecurity.com/2026/09/21/t...

#cybersecurity #infosec #malware

I found www.elastic.co/security-lab... interesting for a few reasons:
- the install vector for the malicious browser extension is pretty neat, and
- the "customer id" is a UUIDv1 and Unfurl can extract the timestamp

Unfurl on the download URL: hindsig.ht/unfurl/?url=...

#DFIR #Malware #BF4SA

📣 New Podcast! "Brevo Supply Chain Attack: Malware Injected Into 100,000+ Websites" on @Spreaker #apiattack #breach #brevo #clickfix #cloudflare #cloudsecurity #cyberattack #cybersecurity #cyberthreats #databreach #infosecurity #malware #malwareattack #securitynews #supplychainattack #wordpress

Attackers using blockchain-based C2 servers and fake prompts now steal bank logins, 2FA codes, and more. #Malware #Blockchain #Polygo n #2FA #Cybersecurity #BankingTrojan thedailytechfeed.com/hackers-use-...

Remus malware drops syscall hooks, steals wallets, browsers & AI tokens. #Remus #Infostealer #EDR #Cybersecurity #Malware #AI #Credentials thedailytechfeed.com/remus-infost...

Signed driver used to kill 145 security tools & steal passwords with Rapuncel malware. #SecurityNews #Malware #Rapuncel #DriverAttack #CredentialStealer #Cybersecurity thedailytechfeed.com/microsoft-si...

Do you know that moment when you open in IDA a sample you knew nothing about and immediately say "Oh, it's $MALWARE_FAMILY" because you analysed such samples a thousand times already.
#malware #reverseengineering

Malicious #npm packages evade install-script defenses at runtime

https://www.bleepingcomputer.com/news/security/malicious-npm-packages-evade-install-script-defenses-at-runtime/

#cybersecurity #malware

China-linked FamousSparrow is targeting government organizations across Latin America with SparroWocky, a new C++ backdoor built for espionage and stealth.

Listen/Read: hackread.com/china-famous...

#Cybersecurity #FamousSparrow #SparroWocky #Malware #China #LatinAmerica

Compromised Site -> #ClickFix

Malicious Domain:
gonfuirkgroao[.]life
urlscan.io/search/#gonf...
#malware

hxxps://huixian-jprakutanziu.com/
hxxps://jilliangrant.com/
hxxps://johnehalsey.com/
hxxps://supersalescopy.com/
hxxps://sxlantia-jprakutanziu.com/
hxxps://thoibaodailoan.com/
#Phishing #フィッシング詐欺 #malware

e-Taxを装ったAndroidマルウェア
hxxps://amylouisesky.com/
hxxps://baichuanx-jprakutanziu.com/
hxxps://cgcdutyfree.com/
hxxps://dashinginc.com/
hxxps://hangyushengan.com/
hxxps://henanzuoluo.com/
www.virustotal.com/gui/file/de0...
#Phishing #フィッシング詐欺 #malware

Fake Spotify, Zoom and Teams installers are being used in ClickFix attacks to spread ChainScript, a Node.js RAT that uses Polygon smart contracts to locate its C2 server.

Listen/Read: hackread.com/clickfix-cha...

#Cybersecurity #Malware #ClickFix #ChainScript #NodeJS #Polygon

📢 Télécharger des films illégalement est interdit, mais certains torrents cachent aussi un malware

Des cybercriminels ont détourné des torrents de films pour distribuer un exécutable déguisé en « The Odyssey », le film de Christopher Nolan.

#Malware #Cyberveille

iT4iNT SERVER ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure VDS VPS Cloud #CyberSecurity #Malware #RAT #RemoteAccessTrojan #ThreatHunting

ChainScript RAT uses Polygon-based C2 rotation in ClickFix campaigns exploiting Windows & macOS. #Malware #ChainScript #BlockchainSecurity #ClickFix #Polygon #Cybersecurity https://thedailytechfeed.com/new-chainscript-rat-uses-polygon-smart-contracts-to-evade-detection/