Pierluigi Paganini
November 08, 2026
Malware Newsletter
Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia
Shutting the Door on the XCPE Botnet
DarkBlinders: Inside an Active Espionage Campaign
Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles
Poisoned Source: APT29 watering holes target mobile devices with n-day exploits
Hackers hijack cPGuard autoupdate to deploy backdoor, steal data
CWPdoor: The Invisible Backdoor Living Inside Control Web Panel
Insolence beyond belief. Threat actors target information security developers on GitHub
What Malware Actually Does: An Empirical Analysis of Post-Infection Behavior Across Malware Families
MEvince: Knowledge-Constrained LLM Reasoning for Technique Identification from Malware Reports
A Log-to-Image Transformation Framework for Behavior-Aware Malware and Anomaly Detection
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
