MUST READ

United Natural Foods Expects $400M revenue impact from June cyber attack

 | 

Cisco patches critical CVE-2025-20337 bug in Identity Services Engine with CVSS 10 Severity

 | 

UNC6148 deploys Overstep malware on SonicWall devices, possibly for ransomware operations

 | 

Operation Eastwood disrupted operations of pro-Russian hacker group NoName057(16)

 | 

Salt Typhoon breach: Chinese APT compromises U.S. Army National Guard network

 | 

Former US Army member confesses to Telecom hack and extortion conspiracy

 | 

CVE-2025-6554 marks the fifth actively exploited Chrome Zero-Day patched by Google in 2025

 | 

DDoS peaks hit new highs: Cloudflare mitigated massive 7.3 Tbps assault

 | 

U.S. CISA adds Wing FTP Server flaw to its Known Exploited Vulnerabilities catalog

 | 

Android Malware Konfety evolves with ZIP manipulation and dynamic loading

 | 

Belk hit by May cyberattack: DragonForce stole 150GB of data

 | 

North Korea-linked actors spread XORIndex malware via 67 malicious npm packages

 | 

FBI seized multiple piracy sites distributing pirated video games

 | 

An attacker using a $500 radio setup could potentially trigger train brake failures or derailments from a distance

 | 

Interlock ransomware group deploys new PHP-based RAT via FileFix

 | 

Global Louis Vuitton data breach impacts UK, South Korea, and Turkey

 | 

Experts uncover critical flaws in Kigen eSIM technology affecting billions

 | 

Spain awarded €12.3 million in contracts to Huawei

 | 

Patch immediately: CVE-2025-25257 PoC enables remote code execution on Fortinet FortiWeb

 | 

Wing FTP Server flaw actively exploited shortly after technical details were made public

 | 

Security Affairs Malware Newsletter – Round 5

Pierluigi Paganini August 04, 2024

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Unplugging PlugX: Sinkholing the PlugX USB worm botnet  
Introducing Gh0stGambit: A Dropper for Deploying Gh0st RAT  
Mandrake spyware sneaks onto Google Play again, flying under the radar for two years
A Survey of Malware Detection Using Deep Learning
ThreatLabz 2024_Ransomware Report  
Phishing targeting Polish SMBs continues via ModiLoader  
BingoMod: The new android RAT that steals money and wipes data  
Unmasking the SMS Stealer: Targeting Several Countries with Deceptive Apps   
BITS and Bytes: Analyzing BITSLOTH, a newly identified backdoor
Increased Activity Against Apache OFBiz CVE-2024-32113
UNC4393 Goes Gently into the SILENTNIGHT  
STARGAZERS GHOST NETWORK
Malicious Inauthentic Falcon Crash Reporter Installer Distributed to German Entity via Spearphishing Website  
SeleniumGreed: Threat actors exploit exposed Selenium Grid services for Cryptomining
StackExchange Abused to Spread Malicious Python Package That Drains Victims Crypto Wallets  
Social Media Malvertising Campaign Promotes Fake AI Editor Website for Credential Theft
Threat Actor Abuses Cloudflare Tunnels to Deliver RATs
Fighting Ursa Luring Targets With Car for Sale

Follow me on LinkedIn and subscribe to the Newsletter to receive it for free every week.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

Hacking hacking news information security news IT Information Security malware Newsletter Pierluigi Paganini Security News

you might also like

Pierluigi Paganini July 17, 2025
United Natural Foods Expects $400M revenue impact from June cyber attack
Read more
Pierluigi Paganini July 17, 2025
Cisco patches critical CVE-2025-20337 bug in Identity Services Engine with CVSS 10 Severity
Read more

leave a comment

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

United Natural Foods Expects $400M revenue impact from June cyber attack

Security / July 17, 2025

Cisco patches critical CVE-2025-20337 bug in Identity Services Engine with CVSS 10 Severity

Security / July 17, 2025

UNC6148 deploys Overstep malware on SonicWall devices, possibly for ransomware operations

Hacking / July 17, 2025

Operation Eastwood disrupted operations of pro-Russian hacker group NoName057(16)

Cyber Crime / July 16, 2025

Salt Typhoon breach: Chinese APT compromises U.S. Army National Guard network

Intelligence / July 16, 2025