Vidar Malware Conceals Payloads in JPEG, TXT Files to Evade Detection

Vidar has evolved from a basic Arkei-based credential stealer into a multi-stage, stealth-focused infostealer that now hides second‑stage payloads within JPEG and TXT files to evade modern defenses. First observed in 2018, Vidar now operates as a matur…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Fast16 Malware Targets High-Value Systems With Sabotage Capabilities

A previously unknown cyber sabotage framework called fast16, whose core components date back to 2005. This makes it the earliest known sabotage malware of its kind, predating the infamous Stuxnet worm by at least five years. The fast16 framework consis…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

New ClickFix attack Hides in Native Windows Tools to Reduce Detection Risk

Fake CAPTCHA ClickFix attack tricks users into running malicious commands, using cmdkey and regsvr32 to maintain persistence and avoid detection on Windows

·

Captcha, ClickFix, Cyber Attack, cybersecurity, Fraud, Malware, SCAM, Scams and Fraud, Security, Windows

¶¶¶¶¶

TeamPCP Hijacks Bitwarden CLI, Uses Dependabot to Deploy Shai-Hulud Malware

GitGuardian uncovers TeamPCP attack on Bitwarden CLI, abusing GitHub Dependabot to spread Shai-Hulud and poison AI coding tools.

·

Bitwarden, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Developer, Malware, npm, Password manager, Security, TeamPCP

¶¶¶¶¶

Void Dokkaebi Hackers Spread Malware Through Fake Job Interviews

Void Dokkaebi, also known as Famous Chollima, is expanding its cyber operations by turning fake job interviews into a large-scale malware distribution campaign targeting developers. The campaign begins with attackers posing as recruiters from cryptocur…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Harvester APT Expands Spying Operations with New GoGra Linux Malware

New GoGra Linux malware linked to Harvester APT targets systems in South Asia, using fake PDFs and Microsoft APIs for covert command and control.

·

Afghanistan, Carbon Black, Cyber Attack, Cyber-Attacks, cybersecurity, GoGra, Harvester APT, India, Linux, Malware, Security, Symantec

¶¶¶¶¶

Malicious npm Package Hijacks Hugging Face for Malware Delivery

Malicious npm package js-logger-pack is now abusing Hugging Face not just as a malware CDN, but also as a live exfiltration backend for stolen data, turning a popular AI platform into part of a full-featured cross‑platform implant chain. Earlier campai…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Fake Wallpaper App, YouTube Channel Used to Spread notnullOSX Malware

Hackers are abusing a fake macOS wallpaper app and a hijacked YouTube channel to quietly deliver notnullOSX, a new crypto-focused stealer that targets Macs via ClickFix commands and weaponized DMG installers. The campaign is highly selective, going aft…

·

cyber security, Cyber Security News, Malware, Youtube

¶¶¶¶¶

Mustang Panda Hits India and S. Korea with Updated LOTUSLITE Backdoor

Acronis reveals Mustang Panda is using a new LOTUSLITE backdoor to target Indian banks and Korean diplomats. Learn how this DLL sideloading attack works.

·

Acronis, backdoor, China, Cyber Attack, Cyber-Attacks, cybersecurity, India, LOTUSLITE, Malware, Mustang Panda, Security, South Korea

¶¶¶¶¶

109 Fake GitHub Repos Spread SmartLoader, StealC Malware

A coordinated malware operation is abusing fake GitHub repositories to distribute a LuaJIT-based loader, SmartLoader, and a follow-on StealC infostealer, with at least 109 malicious repos active across 103 accounts. The campaign blends cloned open sour…

·

cyber security, Cyber Security News, GitHub, Malware

¶¶¶¶¶

00110010.com

00110010.com

Category: Malware