Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter…
Tag: MALWARE
Spyware vendors found a way to make targeted ads even worse
Israeli adtech outfit allegedly helped spyware vendors infect phones while enjoying Google’s seal of approval
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets.
Is this link safe? Find out with Malwarebytes Scam Link Check
Not sure if a link is safe? Malwarebytes Scam Link Check scans suspicious links for signs of phishing, scams, malware, and other online threats before you…
GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises malicious JavaScript as a font file and…
SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with spear-phishing attacks that…
New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs
A new GhostBat RAT variant targets 60 Android financial application packages used in India, combining accessibility-based PIN capture with a transparent…
New ROMULUS Malware Platform Uses Six Servers to Deliver Multiple Malicious Payloads
ROMULUS, a shared ClickFix delivery platform operating across six identified servers, with confirmed routes distributing a trojanized Stardock package and…
Midnight Blizzard-Linked Malware Server Still Delivering Payloads 8 Weeks After Disclosure
A server linked to a malware campaign attributed to a Midnight Blizzard-associated cluster was still delivering malicious files on October 5, 2026. The…
Android Malware Exposes Its Own Operators While Hijacking Phones and Stealing Sensitive Data
An Android remote-access Trojan, YuanKong, whose weakly protected dropper reveals more than its hidden payload: it exposes the operator account…
PSA: Malware Found in Some Rank Math SEO PRO 3.0.123 Downloads
Rank Math has disclosed that some copies of Rank Math SEO PRO version 3.0.123 contained malware. According to Rank Math, the affected version was…
The Department of Know: Hacked fridges, hiring humans to fix Mythos bugs, targeted ad spyware
See the full stories at cisoseries.com This week’s Department of Know is hosted by Rich Stroffolino, with guests Dennis Pickett , vp and CISO, RTI…
US Air Force pilots used malware-laden USB drives to plan Afghanistan missions
The term military intelligence seems like an oxymoron in this case
Targeted ads installed Candiru spyware in zero-click attacks
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only…
ADINT: Weaponized Ad Tech for Zero-Click Spyware and Mass Identity Vacuuming
Confiant Threat Intelligence – security@confiant.com
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online…
Zero-click attacks used targeted ads to deliver Candiru spyware
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only…
AdFection: How mercenary spyware invades victims’ devices through targeted advertising
Researchers say the attacks have serious implications for the online advertising world, and regulators.
Israeli Ad Firm Built a Spyware Pipeline Inside the Online Advertising System, Researchers Say
An Israeli advertising company quietly turned the infrastructure of targeted digital ads into a delivery mechanism for mercenary spyware, according to new…
Hackers Use New ROMULUS ClickFix Platform to Deliver Malware and Evade Security Detection
Hackers are using a newly identified platform called ROMULUS to deliver malware through ClickFix traps, combining hidden PowerShell scripts, altered…