Malware is a topic tracked in our intelligence system with 5 linked articles.
Symantec's Threat Hunter Team attributes a new attack cluster dubbed 'Swallowtail' — featuring the HOOKEDGE backdoor and a previously undocumented reflective loader — to Russia's GRU-linked APT28 group, targeting two NATO member states including a naval shipbuilder.
A compilation of AI-hacking and containment-breach stories that underscores cybersecurity risk and expanding regulatory/liability questions for AI labs.
A macOS malware operation uses 250+ front-end domains and browser fingerprinting to tailor a fake software download, with a server-side gate that hides the lure from crawlers; Microsoft Threat Intelligence observed the infrastructure over weeks.
A Russian loader-as-a-service operation 'DOUBLECUP' uses ClickFix to stage malware-laced PNGs in victims' cache to deploy CountLoader and a new RAT called DeviceManager.
Malicious npm packages target Alibaba tool users with a cross-platform RAT via a targeted software supply chain attack; one package, lib-mtop, mirrors an Alibaba package name.
NullReceiver hides the C2 IP inside a fabricated Ethereum transfer address in two trojanized npm packages, illustrating a blockchain-based dead-drop C2 evolution.
Subscribe for real-time topic updates and unlimited access to our intelligence platform.