Malware

Safepay ransomware group claims the hack of professional video surveillance provider Xortec

Safepay group claims the hack of professional video surveillance provider Xortec and added the company to its data leak site.…

4 months ago

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 68

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware…

4 months ago

Lazarus targets European defense firms in UAV-themed Operation DreamJob

North Korean Lazarus hackers targeted 3 European defense firms via Operation DreamJob, using fake recruitment lures to hit UAV tech…

4 months ago

Russia-linked COLDRIVER speeds up malware evolution after LOSTKEYS exposure

Russia-linked COLDRIVER rapidly evolved its malware since May 2025, refining tools just days after releasing its LOSTKEYS variant, says Google.…

4 months ago

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 67

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware…

4 months ago

Winos 4.0 hackers expand to Japan and Malaysia with new malware

Winos 4.0 hackers expand from China, Taiwan to Japan, Malaysia using fake Finance Ministry PDFs to spread HoldingHands RAT malware.…

4 months ago

Microsoft revokes 200+ certificates abused by Vanilla Tempest in fake Teams campaign

Microsoft revoked 200+ certificates used by Vanilla Tempest to sign fake Teams installers spreading Oyster backdoor and Rhysida ransomware. Microsoft…

4 months ago

Operation Zero Disco: Threat actors targets Cisco SNMP flaw to drop Linux rootkits

Hackers exploit Cisco SNMP flaw CVE-2025-20352 in “Zero Disco” attacks to deploy Linux rootkits on outdated systems, researchers report. Trend…

4 months ago

Qilin Ransomware announced new victims

Resecurity’s new report details how the Qilin RaaS group relies on global bulletproof hosting networks to support its extortion operations.…

4 months ago

Researchers warn of widespread RDP attacks by 100K-node botnet

A botnet of 100K+ IPs from multiple countries is attacking U.S. RDP services in a campaign active since October 8.…

4 months ago

This website uses cookies.