Severity: HighAction: Review
Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws
ClingSTUN operates as a back-connect proxy backdoor, sets up persistence, and contains exploits for self-propagation.
Malware
Most important this week
Severity: ElevatedAction: Be aware
Alleged dev of Ploutus ATM malware appears in US court after arrest
The U.S. Department of Justice has announced the arrest of the alleged developer of Ploutus malware, used to steal millions of dollars in ATM jackpotting attacks across the United States.
Severity: HighAction: Be aware
macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime.
All Malware stories
Alleged dev of Ploutus ATM malware appears in US court after arrest
Severity: ElevatedAction: Be aware
Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws
Severity: HighAction: Review
Judge dismisses spyware case brought by Salvadoran journalists targeted with Pegasus
Severity: ElevatedAction: Be aware
macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
Severity: HighAction: Be aware
Microsoft says threat actors are ahead in the early AI race
Severity: ElevatedAction: Be aware
Treasury Blacklists Most-Wanted ATM Malware Developer and His Network
Severity: ElevatedAction: Be aware
ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st)
Severity: ElevatedAction: Be aware
US sanctions 10 over ATM malware scheme tied to Tren de Aragua
Severity: ElevatedAction: Be aware
Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure
Severity: ElevatedAction: Be aware
Russian state hackers use new RedFlick technique to push malware
Severity: HighAction: Be aware
Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net
Severity: HighAction: Be aware
Mobile malware warning from Ukrainian researchers includes iPhone exploit kit
Severity: ElevatedAction: Be aware
Russian FSB-linked hackers scale up phishing attacks against Ukraine supporters
Severity: ElevatedAction: Be aware
Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks
Severity: HighAction: Be aware
China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
Severity: HighAction: Be aware
Custom ChatGPTs push ClickFix attacks to deploy RAT malware
Severity: ElevatedAction: Be aware
Controversial spyware firm Paragon to go public by end of year
Severity: ElevatedAction: Be aware
'NeedyMantis' Provides Long-Term Access to Compromised Networks
Severity: HighAction: Be aware
Star Blizzard refines phishing and malware delivery with the RedFlick technique
Severity: HighAction: Be aware
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts
Severity: ElevatedAction: Be aware