Browsing Tag
Malware
2355 posts
F5 BIG-IP APM Linux Malware Hides PHP Web Shell in Apache Memory
Sophos found Linux malware targeting F5 BIG-IP APM that injects a PHP web shell into Apache memory, helping attackers evade file-based detection.
Toy Ghouls Targets Russian Organizations With New Windows Backdoors
Kaspersky found 2 custom Toy Ghouls backdoors that use HiveMQ MQTT and an attacker-controlled Element server to execute commands on Windows systems.
F6 Threat Report Tracks 600 Million Records Across 164 Database Leaks
F6 tracked 164 database leaks exposing more than 600 million records across underground forums and Telegram in 2025 and the first half of 2026.
Sality Botnet Linked to 11 Million IPs Disrupted After 23 Years
US and European authorities disrupted the long-running Sality botnet, using P2P sinkholing to cut infected Windows systems off from its operator.
‘Spring Ring’ Vishing Attack Uses Fake IT Calls on Microsoft Teams to Install Malware
A new Teams vishing campaign called Spring Ring used fake IT support calls to trick employees into installing remote-access tools (RAT) and malware.
Facebook Ads Promote Fake Streaming Apps Delivering PanDa RAT
Intel 471 says Chinese-speaking operators used fake streaming apps and Facebook ads to infect Android users with the PanDa RAT (remote access trojan).
China-Nexus Fire Ant Hackers Target Cisco Routers, TACACS Servers for Espionage
Sygnia details Fire Ant attacks on Cisco routers, TACACS servers and Linux hosts used to steal credentials, collect traffic data and conceal malicious activity.
Microsoft Warns of TerminalFix Campaign Hiding Malware in PNG Images
TerminalFix uses fake Cloudflare CAPTCHA pages to trick users into running PowerShell malware, creating reverse tunnels that provide access to internal systems.
Police Arrest Two Alleged TeamPCP Members Linked to Shai-Hulud Attacks
Australian authorities have charged two alleged TeamPCP members after software supply chain attacks exposed over 500,000 credentials and at least 300GB of data.
RecruitTrap Scam Uses Fake Interview Invites to Steal Corporate Logins
RecruitTrap scam uses fake recruitment pages on mobile devices to hide URL clues, reject personal emails and steal corporate login credentials.