Pierluigi Paganini
September 14, 2025
Malware Newsletter
npm debug and chalk packages compromised
Trojanized ScreenConnect installers evolve, dropping multiple RATs on a single machine
KillSec Ransomware is Attacking Healthcare Institutions in Brazil
AsyncRAT in Action: Fileless Malware Techniques and Analysis of a Remote Access Trojan
ChillyHell: A Deep Dive into a Modular macOS Backdoor
Off Your Docker: Exposed APIs Are Targeted in New Malware Strain
Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass
TraceRAG: A LLM-Based Framework for Explainable Android Malware Detection and Behavior Analysis
Signal-Based Malware Classification Using 1D CNNs
Recent Advancements in Machine Learning Models for Malware Detection: A Systematic Literature Review
Static and Dynamic Malware Analysis Using CycleGAN Data Augmentation and Deep Learning Techniques
APT37 Targets Windows with Rust Backdoor and Python Loader
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
Malware / September 13, 2025
