Pierluigi Paganini
November 15, 2026
Malware Newsletter
Exchange for breakfast: Turla’s Cereal tricks are not for kids
Inside an AhsayCBS Intrusion: Hidden Webshells, a CryptoMiner, and a C2 Implant
Not All That Glitters Is Gold: Tracking CopperDragon’s Sparrow Framework Around the Globe
Remus Stealer Markets Persistent Gmail Access: Hudson Rock Investigates
Spied on by governments with Israeli spyware: in Europe, no one pays the price
School Bomb Threats: Hudson Rock Finds Reported Sender Accounts in Infostealer Data
ScreenConnect Attack: SCKit Turns Remote Support Into an Attack Platform
wfx: GitHub Actions Credential Stealer Hits 8,000 Repos
Gootloader Malware Disrupted in International Cyber Operation
When Everything Becomes Open-Source
MMD-072-2026 – ARTEX detection signature pack – from IOC w/playbook process
The Enemy Within. Tracking LIMINAL PANDA and SilentAir through Mobile Networks
AutoPYara: Next-Gen YARA Rule Generator for Malware Family Clustering
What Malware Actually Does: An Empirical Analysis of Post-Infection Behavior Across Malware Families
Cursor An update on our recent security incident
Ledger’s Response to the Hardware Implant Attack
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
