Pierluigi Paganini
August 24, 2025
Malware Newsletter
Hunt.io Exposes and Analyzes ERMAC V3.0 Banking Trojan Full Source Code Leak
Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824
Supply Chain Risk in Python: Termncolor and Colorinal Explained
Dissecting PipeMagic: Inside the architecture of a modular backdoor framework
GodRAT – New RAT targeting financial institutions
Preventing Domain Resurrection Attacks
Patching for persistence: How DripDropper Linux malware moves through the cloud
Finding Malware: DIRTYBULK and Friends – USB Infections To Fuel Cybercriminal Coinmining Operations
Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS
SaMOSA: Sandbox for Malware Orchestration and Side-Channel Analysis
Evasive Ransomware Attacks Using Low-level Behavioral Adversarial Examples
Demystifying the Role of Rule-based Detection in AI Systems for Windows Malware
APT36: Targets Indian BOSS Linux Systems with Weaponized AutoStart Files
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, NEWSLETTER)
Malware / September 13, 2025
