Updated logoUPDATED

Malware & Threat Intelligence News

830 stories · Updated every 5 minutes · Page 13 of 21

  3. 'CrashStealer' malware poses as an Apple tool to steal passwords & Mac data

    AppleInsider · · Medium severity

    CrashStealer, a newly documented Mac infostealer, used an Apple-notarized meeting app to reach victims before stealing passwords, browser data and cryptocurrency credentials behind a fake system prompt. CrashStealer fake password prompt...

  4. New malware for Android can empty your bank accounts in secret

    Android Authority · · Medium severity

    TL;DR Researchers have discovered a new malware that gains deep access to your phone and obtains high-level permissions via wireless ADB to empty your bank accounts. This is an enhanced version of the RedHook remote access trojan...

  5. RedHook Android malware now uses Wireless ADB for shell access

    BleepingComputer · · Medium severity

    A new version of the RedHook Android malware abuses the Android Wireless Debugging (Wireless ADB) mechanism in a novel way to gain shell-level privileges without requiring a computer connection.

  6. How the FSF Sysadmins are Blocking Botnets with reaction

    Slashdot ·

    For nearly two years the Free Software Foundation has been fighting web crawlers (including many aggressively scraping training data for AI models). A botnet controlling about five million IPs hit one system for six months in 2025....

  11. This new Windows malware can take over your PC and wipe it clean

    Malwarebytes Labs · · Medium severity

    Microsoft published new research on GigaWiper, a modular Golang backdoor for Windows that combines robust remote access with multiple ways to permanently destroy systems and data. GigaWiper is a Windows backdoor that Microsoft has...

  12. GigaWiper Combines Multiple Malware for System-Level Sabotage

    SecurityWeek · · High severity

    The backdoor’s destructive capabilities include a standalone wiper, ransomware encryption, and a multi-pass wiping command. The post GigaWiper Combines Multiple Malware for System-Level Sabotage appeared first on SecurityWeek .

  13. ‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism

    SecurityWeek · · Critical severity

    Researchers demonstrate adversarial hallucination squatting against popular AI assistants to achieve remote code execution. The post ‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism appeared first on SecurityWeek .

  14. Network of 200 GitHub Repositories Used for Malware Infection

    SecurityWeek · · Medium severity

    A Go module is used to load PowerShell code that fetches a resolver from public dead drops to execute Windows malware. The post Network of 200 GitHub Repositories Used for Malware Infection appeared first on SecurityWeek .

  19. GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

    Microsoft Security Blog · · Medium severity

    In this article A wiper inside a backdoor Backdoor capabilities How GigaWiper was assembled Conclusion: Multiple destructive capabilities consolidated into a single implant Defending against destructive threats Microsoft Defender...

  21. OTX Threat: Vidar Infostealer Being Spread through Phishing Emails

    AlienVault OTX · · Medium severity

    Vidar, a Malware-as-a-Service infostealer first identified in 2018, continues to be distributed through phishing campaigns targeting Korea in the first half of 2026. The threat actor uses phishing emails disguised as job applications...

  22. OTX Threat: Continues building ORB networks using new malware

    AlienVault OTX · · Medium severity

    An advanced persistent threat actor designated UAT-7810 maintains and expands the LapDogs Operational Relay Box network infrastructure. This China-nexus group develops custom malware including SHORTLEASH and its evolved version...

  24. A single malware file can outweigh an entire AI dataset

    Help Net Security · · Medium severity

    Antivirus vendors and security startups keep shipping AI features that promise to read malware the way a seasoned analyst would. The results inside security teams tell a quieter story. A new paper argues that static analysis of...

  28. SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users

    The Hacker News · · Medium severity

    A new banking fraudulent operation is targeting customers of Mexican banks, fintech, payment processors, and cryptocurrency exchanges using ClickFix lures. The activity cluster, tracked by Elastic Security Labs under the moniker...

  31. China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware

    The Hacker News · · Medium severity

    A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand its Operational Relay Box (ORB) network by breaking into internet-facing networking devices. According to findings from Cisco Talos, UAT-7810...

  33. Hackers can use 9 of the most popular AI tools to assemble massive botnets

    Ars Technica · · Medium severity

    In the brief history of AI security, the prompt injection has quickly become the top threat. Large language models are inherently unable to distinguish between legitimate instructions provided by users and malicious ones sneaked into...

  34. Chinese hackers develop LONGLEASH malware to expand ORB network

    BleepingComputer · · Medium severity

    Chinese hackers tracked as 'UAT-7810' are actively evolving their malware to expand their Operational Relay Box (ORB) network by compromising internet-facing networking devices, primarily unpatched Ruckus routers.

  37. Fake IT bods on Microsoft Teams coax workers into installing malware

    The Register · · Medium severity

    Cybercriminals are using fake IT support calls on Microsoft Teams to persuade employees to surrender control of their PCs before installing the EtherRAT remote access trojan, according to researchers at Palo Alto Networks' Unit 42....

  39. Fake IT support calls on Microsoft Teams push EtherRAT malware

    BleepingComputer · · Medium severity

    Threat actors are abusing Microsoft Teams voice calls by impersonating corporate IT support staff to trick employees into installing the EtherRAT malware, giving attackers initial access to corporate networks.

Get these stories the moment they break

Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.

Join Updated free

Tech news by section

Tech news by region

Trending topics