StreamRat, a newly identified Android banking trojan distributed through deceptive Meta and TikTok advertisements impersonating a free…
Tag: MALWARE
Researchers Find Malware That Uses AI Models Instead of Human Hackers for Control
A Windows malware implant named CLOSEDQUORUM that uses commercial large language models as an autonomous command-and-control layer, shifting tactical…
Stealthy WordPress Malware Uses Must-Use Plugin and Ethereum EtherHiding for Persistent Backdoor Access
A newly analyzed WordPress malware implant combines must-use plugin persistence, hidden administrator accounts, credential theft, cross-site propagation,…
Windows CLOSEDQUORUM malware uses AI models to autonomously select post-compromise actions
‘first’ publicly documented Windows implant to use LLMs for C2
RatHat Android Malware Uses AI to Target Banking Credentials in Real Time
RatHat Android malware uses generative AI to navigate infected devices, steal banking credentials, intercept OTP codes and reinstall itself after removal…
CAIRN – A New Tool to Track AI Malware That Operates Without Human Control
Cisco Talos has released CAIRN, an open-source toolkit designed to hunt, classify, and track AI-integrated malware by examining the digital markers…
MovieReaper Malware Uses The Odyssey Torrents to Infect Users Worldwide
MovieReaper malware spreads through compromised Odyssey torrents, infecting hundreds of victims while using Solana to locate command-and-control…
TraderTraitor Mac Malware Targets IT Firm Through Weaponized Terraform Projects
A North Korean-linked cybercrime group known as TraderTraitor has tied another macOS infection in an IT services company with no cryptocurrency ties to…
Malicious B-tree NPM Package Hides Malware
A malicious NPM package masquerading as a popular JavaScript library has been downloaded millions of times, representing a significant supply chain…
Researchers uncover malware that uses AI to choose its next move
To help security practitioners catch malware that leans on AI, researchers from Cisco Talos shared an open-source framework that they hope will be used to…
LausivLoader analysis, or how to pass data between malware stages, (Thu, Sep 17th)
At the end of August, a malspam message was caught in the quarantine of a mail gateway operated by one of my customers. The message was not especially…
Linux BambooToken Malware Uses MQTT C2 for Remote Shell Access and File Exfiltration
A Linux variant of the BambooToken backdoor uses MQTT as its command-and-control channel, enabling operators to profile compromised hosts, execute shell…
A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight
Cisco Talos researchers created a new framework for identifying malware and hacking tools that rely on AI chatbots—and quickly discovered something…
Vidar Malware Rewrites Its Obfuscation With Every Build to Make Detection Harder
Vidar has spent years stealing the data people keep closest: saved passwords, browser cookies, wallet files and system details. Now its operators have…
Introducing CAIRN: Frontier tracking for AI-integrated malware
Talos is releasing CAIRN, a research toolkit for hunting, classifying, and tracking emerging AI-integrated malware.
ShinyHunters hijacks Clop, fake LastPass kills security tools, trusted npm release carries malware
ShinyHunters hijacks Clop’s own leak site Fake LastPass installers kill security tools Trusted npm release carries GHAPPIER malware Huge thanks to our…
Meta’s Muse AI Agent 0-Day Vulnerability Allows Attackers to Hijack the Tool and Inject Malware
A zero-day vulnerability in Meta’s Muse AI agent for macOS could allow malware already running under a user account to hijack the assistant, intercept…
Meta Muse AI app flaw lets local malware redirect dictation traffic
Ad biz promises users control while bug could expose voice prompts
Peer Pressure: Inside the Sality Botnet Disruption Operation
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Peer Pressure: Inside the Sality Botnet Disruption Operation
Malicious npm Package With 2 Million Downloads Hides Malware in Runtime Code
A malicious npm package that appeared to be an ordinary data-indexing tool has exposed a weakness in software supply-chain defenses. The package,…