Pierluigi Paganini
October 18, 2026
Malware Newsletter
IronChain Ransomware Threatens Businesses with Permanent Data Loss and Costly Downtime
AI models may be capable of self-replicating without access to a datacenter
XWorm Reborn: From infostealer to surveillance platform
Hirudo: From Fake Updates to Patched Banking Apps
The campaign that never stopped: tracking GhostAction from 2025 to 2026
BREAK THE SILENCE: TRACKING SILENT LYNX THROUGH EXPOSED INFRASTRUCTURE
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
An Italian Phishing Campaign Delivering an iOS Exploit Chain
Malfex imgdecode npm native addon loader
CikaBika Bot: Inside a Discord RAT
Trigger Value Selection in Clean-Label Malware Backdoors: An Effectiveness-Detectability Analysis
Phantomware: a Data Augmentation Framework for the Detection of Emerging Malware Campaigns
Geometry-Aware Risk-Guided Active Learning for Malware Concept Drift Adaptation
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
Intelligence / October 17, 2026
