Latest Malware news

New Unfurling Hemlock threat actor floods systems with malware

A threat actor tracked as Unfurling Hemlock has been infecting target systems with up to ten pieces of malware at the same time in campaigns that distribute hundreds of thousands of malicious files.
- Bill Toulas
- June 27, 2024
- 06:27 PM
- 0
Snowblind malware abuses Android security feature to bypass security

A novel Android attack vector from a piece of malware tracked as Snowblind is abusing a security feature to bypass existing anti-tampering protections in apps that handle sensitive user data.
- Bill Toulas
- June 26, 2024
- 09:33 AM
- 1
New Medusa malware variants target Android users in seven countries

The Medusa banking trojan for Android has re-emerged after almost a year of keeping a lower profile in campaigns targeting France, Italy, the United States, Canada, Spain, the United Kingdom, and Turkey.
- Bill Toulas
- June 25, 2024
- 01:02 PM
- 0
Phoenix UEFI vulnerability impacts hundreds of Intel PC models

A newly discovered vulnerability in Phoenix SecureCore UEFI firmware tracked as CVE-2024-0762 impacts devices running numerous Intel CPUs, with Lenovo already releasing new firmware updates to resolve the flaw.
- Lawrence Abrams
- June 20, 2024
- 05:31 PM
- 0
Fake Google Chrome errors trick you into running malicious PowerShell scripts

A new malware distribution campaign uses fake Google Chrome, Word, and OneDrive errors to trick users into running malicious PowerShell "fixes" that install malware.
- Bill Toulas
- June 17, 2024
- 06:31 PM
- 3
New Linux malware is controlled through emojis sent from Discord

A newly discovered Linux malware dubbed 'DISGOMOJI' uses the novel approach of utilizing emojis to execute commands on infected devices in attacks on government agencies in India.
- Lawrence Abrams
- June 15, 2024
- 01:08 PM
- 0
Chinese hackers breached 20,000 FortiGate systems worldwide

The Dutch Military Intelligence and Security Service (MIVD) warned today that the impact of a Chinese cyber-espionage campaign unveiled earlier this year is "much larger than previously known."
- Sergiu Gatlan
- June 11, 2024
- 12:22 PM
- 3
Warmcookie Windows backdoor pushed via fake job offers

A Windows malware named 'Warmcookie' is distributed through fake job offer phishing campaigns to breach corporate networks.
- Bill Toulas
- June 11, 2024
- 11:17 AM
- 0
Kaspersky releases free tool that scans Linux for known threats

Kaspersky has released a new virus removal tool named KVRT for the Linux platform, allowing users to scan their systems and remove malware and other known threats for free.
- Bill Toulas
- June 01, 2024
- 11:17 AM
- 12
Europol identifies 8 cybercriminals tied to malware loader botnets

Europol and German law enforcement have revealed the identities of eight cybercriminals linked to the various malware droppers and loaders disrupted as part of the Operation Endgame law enforcement operation.
- Bill Toulas
- May 31, 2024
- 12:40 PM
- 2
Pirated Microsoft Office delivers malware cocktail on systems

Cybercriminals are distributing a malware cocktail through cracked versions of Microsoft Office promoted on torrent sites.
- Bill Toulas
- May 30, 2024
- 04:53 PM
- 0
Malware botnet bricked 600,000 routers in mysterious 2023 attack

A malware botnet named 'Pumpkin Eclipse' performed a mysterious destructive event in 2023 that took 600,000 office/home office (SOHO) internet routers offline, according to a new report by researchers at Lumen's Black Lotus Labs.
- Bill Toulas
- May 30, 2024
- 02:56 PM
- 1
macOS version of elusive 'LightSpy' spyware tool discovered

A macOS version of the LightSpy surveillance framework has been discovered, confirming the extensive reach of a tool only previously known for targeting Android and iOS devices.
- Bill Toulas
- May 30, 2024
- 06:00 AM
- 0
Police seize over 100 malware loader servers, arrest four cybercriminals

An international law enforcement operation codenamed 'Operation Endgame' has seized over 100 servers worldwide used by multiple major malware loader operations, including IcedID, Pikabot, Trickbot, Bumblebee, Smokeloader, and SystemBC.
- Bill Toulas
- May 30, 2024
- 04:35 AM
- 1
Over 90 malicious Android apps with 5.5M installs found on Google Play

Over 90 malicious Android apps were found installed over 5.5 million times through Google Play to deliver malware and adware, with the Anatsa banking trojan seeing a recent surge in activity.
- Bill Toulas
- May 28, 2024
- 05:48 PM
- 7
Arc browser’s Windows launch targeted by Google ads malvertising

A new Google Ads malvertising campaign, coinciding with the launch of the Arc web browser for Windows, was tricking people into downloading trojanized installers that infect them with malware payloads.
- Bill Toulas
- May 25, 2024
- 11:17 AM
- 0
JAVS courtroom recording software backdoored in supply chain attack

Attackers have backdoored the installer of widely used Justice AV Solutions (JAVS) courtroom video recording software with malware that lets them take over compromised systems.
- Sergiu Gatlan
- May 23, 2024
- 05:17 PM
- 0
New BiBi Wiper version also destroys the disk partition table

A new version of the BiBi Wiper malware is now deleting the disk partition table to make data restoration harder, extending the downtime for targeted victims.
- Bill Toulas
- May 20, 2024
- 12:06 PM
- 0
Banking malware Grandoreiro returns after police disruption

The banking trojan "Grandoreiro" is spreading in a large-scale phishing campaign in over 60 countries, targeting customer accounts of roughly 1,500 banks.
- Bill Toulas
- May 18, 2024
- 10:12 AM
- 0
Russian hackers use new Lunar malware to breach a European govt's agencies

Security researchers discovered two previously unseen backdoors dubbed LunarWeb and LunarMail that were used to compromise a European government's diplomatic institutions abroad.
- Bill Toulas
- May 16, 2024
- 11:57 AM
- 0