npm Calendar Packages Conceal RedShell, the Linux Beacon of RedC2 4.0
Malicious npm calendar packages hide RedShell Linux beacon for RedC2 4.0, enabling remote command execution and posing supply-chain risks to developers and infrastructure.
Malware
More news
Page 10 / 13 · 113 articles
SynkLoader: The Malware Using Microsoft Teams to Steal Credentials and Control PCs
SynkLoader: Microsoft Teams malware that steals credentials and enables remote control. Poses as IT tools. Learn how to defend against it.
Three Compromised Rust Crates Distributed Malware During Compilation
Three compromised Rust crates infected software builds with malware during compilation, bypassing security measures and affecting dependencies.
MacSync Stealer: Microsoft Identifies 31 Domains Used to Target macOS
Microsoft reveals 31 domains linked to MacSync Stealer, a macOS infostealer that steals credentials, keys, and data via social engineering and HTTP uploads.
Trivy compromise may have triggered attack exposing more than 2,500 organizations
A Trivy supply chain compromise triggered an attack on 2,500+ organizations, exposing secrets and targeting CI/CD environments.
Evooo1Bot, the New Mirai Variant Turning Routers into Proxies for Attackers
Evooo1Bot, a new Mirai variant, exploits router vulnerabilities to create encrypted proxies for attackers, posing global cybersecurity risks.
Expired Domains Reused for Malware and Scams: Attacks Exploit Inherited Trust
Learn how criminals reuse expired domains for malware and scams, exploiting inherited trust and traffic.
Evooo1Bot Turns Linux Gateways into SOCKS5 Relays for Attacks and Credential Theft
Evooo1Bot is a Linux botnet exploiting exposed gateways to create SOCKS5 relays for attacks and credential theft, with persistence and DDoS capabilities.
AmnesiaStealer Turns the macOS Browser into a Remotely Controlled Session
On August 14, 2026, Jamf Threat Labs reported AmnesiaStealer, a new Rust-based infostealer designed to target macOS users. The observed distribution