Pierluigi Paganini
June 07, 2026
Malware Newsletter
Malware Targeting WordPress Abuses Steam Community Profiles for Command & Control Operations
Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens
Operation XENOFISCAL: SideCopy deploying persistent XenoRAT targeting the MoF, Afghanistan
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor
FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm
UAC-0184: From HTA to a Signed Network Stack
PCPJack Hijacked 230 AWS, GCP, and Azure Servers to Run a Hidden SMTP Relay Network
TA4922: The Suspected Chinese Crime Group is Going Global
shrun, apiwatcher, and argus: three malware analysis tools built with Claude
VerdantBamboo: Just Another BRICKSTORM in the Firewall
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
