UPDATED
Steam Community Profiles abused as C2 network in new WordPress malware infection campaign
TechRadar · · Medium severity
Malware & Threat Intelligence News
Malware campaign targeting Minecraft users infects over 116,000 systems
Help Net Security · · Medium severity
A Malware-as-a-Service (MaaS) operation named WeedHack is targeting Minecraft users and allows threat actors to gain remote access to victims’ screens, webcams, and files through a web-based dashboard, McAfee researchers found....
Infostealers are becoming the go-to phishing payload
Malwarebytes Labs · · Medium severity
Slowly but surely, cybercriminals are turning to infostealers instead. Traditional phishing hasn’t gone away. But many attackers are no longer focused solely on tricking victims into entering usernames and passwords on fake login pages.
Attackers Abuse ChatGPT Share Links to Host Fake Outage Pages That Deliver Malware
Ghacks Technology News · · Medium severity
Threat actors are exploiting ChatGPT's content-sharing feature to set up fake OpenAI outage pages. These pages instruct users to download malware disguised as the ChatGPT desktop app. The campaign, called "LLMShare" and uncovered by...
Minecraft malware campaign reportedly infected over 116,000 players
Digital Trends · · Medium severity
Researchers say a malware campaign disguised as Minecraft mods and cheats infected over 116,000 devices through Discord servers and gaming communities.
Huge Botnet Linked To Russia Infected Over 10 Million Devices Before Being Shut Down
BGR ·
A huge botnet that was supposedly linked to Russia was found to have infected over 10 million devices. Authorities in The Netherlands have now shut it down.
CrowdStrike and Google take down botnet used by hackers to target open source software developers
TechCrunch Security · · Medium severity
Cybercriminals used the Glassworm botnet to infect open source software projects with malware, and in turn hack the developers and companies that use that software.
700+ education and tech websites hijacked in huge ClickFix malware campaign
Malwarebytes Labs · · Medium severity
Attackers are abusing a critical Ghost Content Management System ( CMS ) vulnerability to hijack more than 700 legitimate websites and inject a fake Cloudflare verification step that tricks visitors into running a Windows command that...
Fake ChatGPT download site infects Windows and Mac users with malware
Malwarebytes Labs · · Medium severity
A convincing fake website is impersonating OpenAI’s ChatGPT download page and infecting visitors with malware designed to steal passwords, browser data, cryptocurrency wallets, and other sensitive information. The site, openew[.]app ,...
New WordPress Malware Uses Steam Profile Comments to Hide C2 Instructions
HackRead · · Medium severity
GoDaddy researchers found WordPress malware using Steam Community profile comments to hide encoded command and control data, with nearly 1,980 sites affected.
Fake ChatGPT Desktop App Ads Used to Push Password-Stealing Malware
HackRead · · Medium severity
Fake ChatGPT desktop app ads pushed password-stealing malware by abusing trusted AI links, hiding from scanners, and tricking users into downloads.
AI-Generated npm Malware Leaks Its Own GitHub Token
Infosecurity Magazine · · Medium severity
Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator
Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices
The Hacker News ·
Dutch authorities have announced the takedown of a botnet that enslaved millions of infected devices, including computers, tablets, smartphones, and IoT devices, to carry out malicious attacks. The bot network, per the Dutch Politie and...
Over 116,000 Minecraft systems infected in WeedHack malware campaign
BleepingComputer · · Medium severity
A large-scale malware campaign dubbed WeedHack is targeting Minecraft players and has infected more than 116,000 systems since January.
Shai-Hulud malware worms Red Hat npm package versions downloaded 80K times a week
The Register · · Critical severity
Security researchers on Monday found dozens of Red Hat npm package releases infected with the Mini Shai-Hulud worm that TeamPCP cybercriminals recently open-sourced. The new supply chain attack hit at least 32 npm package releases...
Fake Claude Code Installers Deliver Credential-Stealing Malware
TechRepublic · · Medium severity
Fake Claude Code install sites are pushing malware that steals API keys, developer credentials, crypto wallets, and other sensitive data. The post Fake Claude Code Installers Deliver Credential-Stealing Malware appeared first on...
'Security of your network is essential to security of your robot': Industrial robots targeted by malware, which could open them up to hacking — is this how the revolution begins?
TechRadar · · Medium severity
FBI Chief Kash Patel’s Clothing Store Hacked in ClickFix Infostealer Attack
HackRead · · Medium severity
Hackers compromised FBI Chief Kash Patel’s clothing store in a ClickFix attack that tricked macOS users into installing infostealer malware.
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos
The Hacker News ·
A sketchy dev tool got people pwned, old bugs came back from the dead, and security products somehow needed protecting from themselves. A bunch of companies spent the week checking old boxes and forgotten servers they should've patched...
GitHub hit with another major attack — Megalodon hits over 5,000 repos with malware-laden commits
TechRadar · · Medium severity
A pink triangle with a red exclamation mark inside on a blue digital landscape
Laravel-Lang Packages Poisoned for Malware Delivery
SecurityWeek · · Medium severity
Published within a 15-minute window, the malicious tags introduced backdoors to exfiltrate CI secrets. The post Laravel-Lang Packages Poisoned for Malware Delivery appeared first on SecurityWeek .
TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO
The Hacker News · · Critical severity
A new coordinated cross-ecosystem software supply chain attack campaign has targeted npm, PyPI, and Crates.io to distribute credential-stealing malware. The campaign, codenamed TrapDoor, spans more than 34 malicious packages across over...
'Mainstream malware now regularly affects macOS users' — inside the relentless rise of the AMOS infostealer, one of the most dangerous macOS malware ever developed
TechRadar · · Medium severity
Laravel Lang packages hijacked to deploy credential-stealing malware
BleepingComputer · · Critical severity
A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated credential-stealing malware campaign after attackers abused GitHub version tags to distribute malicious code through...
Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware
The Hacker News · · Critical severity
A new "coordinated" supply chain attack campaign has impacted eight packages on Packagist including malicious code designed to run a Linux binary retrieved from a GitHub Releases URL. "Although the affected packages were all Composer...
RondoDox Botnet Exploits Critical 2018 Vulnerability to Hijack ASUS Routers
HackRead · · Medium severity
Cybersecurity firm VulnCheck reveals hackers are using a critical 2018 vulnerability to bypass authentication and hack over a million ASUS routers.
Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware
The Hacker News · · Medium severity
The Belarus-aligned threat actor known as Ghostwriter (aka UAC-0057 and UNC1151Ukraine's National Security and Defense Council) has been observed using lures related to Prometheus, a Ukrainian online learning platform, to target...
Canadian man arrested, charged for running KimWolf DDos botnet
The Record by Recorded Future · · Medium severity
In court documents unsealed on Thursday, the Justice Department said Jacob Butler ran KimWolf as a DDoS-for-hire service that infected over a million devices worldwide.
Canadian Man Arrested for Operating Kimwolf Botnet
SecurityWeek · · Medium severity
Jacob Butler, 23, has been arrested in Canada and US authorities are seeking his extradition on computer hacking charges. The post Canadian Man Arrested for Operating Kimwolf Botnet appeared first on SecurityWeek .
Fake Gemini and Claude Code Sites Spread Infostealers Through SEO Poisoning
Infosecurity Magazine · · Medium severity
The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency wallets
Suspected KimWolf botnet admin arrested over DDoS-for-hire operation
Help Net Security · · Medium severity
and Canadian authorities arrested and charged a Canadian man accused of operating the KimWolf DDoS botnet, a service linked to attacks that infected more than one million devices worldwide. Jacob Butler, 23, of Ottawa, Canada, also...
Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks
The Hacker News · · Medium severity
Department of Justice (DoJ) on Thursday announced the arrest of a Canadian man in connection with allegedly operating a distributed denial-of-service (DDoS) botnet known as Kimwolf. In tandem, Jacob Butler (aka Dort), 23, Ottawa,...
US and Canada arrest and charge suspected Kimwolf botnet admin
BleepingComputer · · Medium severity
and Canadian authorities arrested and charged a Canadian man with operating the KimWolf distributed denial-of-service (DDoS) botnet, which infected nearly two million devices worldwide.
Showboat Linux Malware Hits Middle East Telecom with SOCKS5 Proxy Backdoor
The Hacker News · · Medium severity
Cybersecurity researchers have disclosed details of a new Linux malware dubbed Showboat that has been put to use in a campaign targeting a telecommunications provider in the Middle East since at least mid-2022. "Showboat is a modular...
Chinese hackers target telcos with new Linux, Windows malware
BleepingComputer · · Medium severity
A Chinese cyber-espionage campaign has been targeting telecommunications providers with newly discovered Linux and Windows malware dubbed Showboat and JFMBackdoor, respectively.
Android Malware Spotted Subscribing Victims to Paid Services Without Consent
HackRead · · Medium severity
Cybersecurity researchers expose a 10-month global Android malware campaign using fake apps to secretly charge users through premium SMS bills.
Microsoft’s Retired IE Tool MSHTA Now Being Used in Fileless Malware Attacks
HackRead · · Medium severity
Bitdefender researchers reveal how cyberattackers are abusing the built-in Windows MSHTA utility to silently deploy loaders and infostealers.
Your browser could already be part of a botnet thanks to this dangerous Chrome flaw
Android Authority · · Medium severity
TL;DR A recently disclosed Chromium vulnerability could allow malicious websites to silently hijack browsers like Chrome and Edge without downloads, pop-ups, or user interaction. The exploit abuses Browser Fetch, a feature meant for...
Microsoft Disrupts Malware-Signing Service Used by Ransomware Gangs
TechRepublic · · High severity
Microsoft disrupted Fox Tempest, a malware-signing service accused of abusing Azure certificates to disguise ransomware and malware as trusted software. The post Microsoft Disrupts Malware-Signing Service Used by Ransomware Gangs...
'This reveals a broader security problem': Experts warn a key Microsoft legacy tool is still being abused to launch malware campaigns
TechRadar · · Medium severity
Get these stories the moment they break
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated freeTech news by section
- Top Tech News
- Cybersecurity News
- AI & Deep Tech News
- DevOps & Cloud News
- Funding, M&A & Layoffs
- Enterprise IT & CIO News
- Global Tech News
- Tech Rumors & Leaks
- Tech Careers News
- Trending Tech News
Tech news by region
- India & Middle East Tech News
- Africa Tech News
- Asia & China Tech News
- APAC Tech News
- Europe Tech News
- North America Tech News
Trending topics
- Ransomware Attacks
- Data Breaches
- Zero-Day Vulnerabilities
- CVEs & Actively Exploited Vulnerabilities
- Phishing Attacks
- Malware & Threat Intelligence
- Software Supply Chain Attacks
- Generative AI
- OpenAI & ChatGPT
- Anthropic & Claude
- Google Gemini & DeepMind
- Large Language Models (LLMs)
- AI Agents
- Nvidia & AI Chips
- Semiconductors & Chips
- Quantum Computing
- Kubernetes & Containers
- AWS (Amazon Web Services)
- Microsoft & Azure
- Apple
- Google & Alphabet
- Tech Layoffs
- Tech IPOs
- Tech Acquisitions & Mergers
- Startup Funding Rounds
- Indian Startups
- Data Privacy & Regulation
- Open Source