-
Kaspersky links OctLurk and SilkLurk to cyberespionage attacks stealing passwords, emails and files from government systems in six countries since January 2025.
·
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Dr.Web details Siggen Windows backdoor that uses Steam for C2, steals credentials and crypto data and infects Visual Studio projects to spread among developers.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft details GigaWiper, a destructive Windows backdoor that can wipe disks, encrypt files and give attackers remote access to compromised systems globally.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Woodgnat Hackers use Backdoor.Mistic, a stealthy RAT, to let brokers compromise networks and sell entry points to ransomware groups, putting firms at risk.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
DragonForce ransomware abused Microsoft Teams relay systems to hide a custom backdoor, steal files and encrypt systems at a US services firm.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Operation FlutterBridge uses fake Google ads and shell companies to deploy FlutterShell, a new macOS backdoor targeting unsuspecting users.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
GoDaddy researchers found WordPress malware using Steam Community profile comments to hide encoded command and control data, with nearly 1,980 sites affected.
·
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Operation HumanitarianBait uses fake aid documents, GitHub-hosted payloads, and Python spyware to target Russian-speaking victims.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google researchers say hackers used AI to develop zero-day exploits, Android backdoors, and automated supply chain attacks targeting GitHub and PyPI.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶


