XWorm

Inside SiriusQT: A Seriously Skilled RAT

AI-Assisted Cyberespionage Campaign Targets Government Systems

Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain

Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure

China Linked Warlock Ransomware Campaign Targets Critical Infrastructure

Microsoft’s MSHTA Legacy Tool Still Powers Malware Campaigns on Windows

XWorm Unmasked: Weaponizing Script Obfuscation and Modern Evasion Techniques

Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer

Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations

CLOSEDQUORUM: Malware Puts AI in the C2 Loop

FamousSparrow Takes Flight with New SparroWocky Backdoor

China and the Cyber Arms Race for AI Supremacy

BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns

Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware

BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace

The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat

2CLoader: A New Malware Loader Delivering Vidar and Remus

BlindEagle Targets Colombian Government Agency with Caminho and DCRAT

Financially Motivated Threat Actor BREEZE COMET Targets Brazil

Unpacking “Cruciferra”: An Analysis of a Sophisticated Crypter Service

2CLoader Uses Hell’s Gate Syscalls and Windows API Hooks to Deliver Vidar and Remus

[Amadey] Targeted Analysis of its Campaign’s Kill Chain, String and Traffic Encryption Algorithm, and Download of Additional Modules

Hackers Use Potemkin Loader to Deliver RMMProject RAT in ClickFix Intrusion

[Amadey] Targeted Analysis of its Campaign’s Kill Chain, String and Traffic Encryption Algorithm, and Download of Additional Modules

Malware Analysis — Xworm