#malware
81 stories taggedmalware.
NeedyMantis: The Hidden Malware That Moves In After the Break-In
Microsoft has named a previously unknown malware family being used against telecoms, universities, and government contractors. The group behind it is linked to China. And once it's inside a network, it's built to stay quiet.
SectopRAT Hidden Inside Legitimate Audio Software to Steal Passwords and Take Remote Control
Fortinet's incident responders found a powerful remote-access trojan tucked inside a tampered copy of a real audio program. The malware can grab browser passwords, watch your screen, and hand full control of a Windows PC to criminals.
New BambooToken Malware Hides Its Orders Inside IoT Messaging Traffic
Researchers at Lumen's Black Lotus Labs say the backdoor has quietly infected around a dozen firms across Asia and South America since 2023, using a chat protocol built for smart devices to stay hidden.
An Attacker Hijacked an AI Coding Assistant and Spread a Worm Across 100 Repositories
Mandiant says a threat actor poisoned an AI tool's recommendations at a software-as-a-service provider, then used the resulting access to push Shai-Hulud through about 100 internal code repositories.
BengalSEO: The Decade-Old Rajasthan Operation Poisoning Bing Results
Researchers say two Indian IT firms have quietly gamed search engines since 2015 to push malware and fake tech-support pop-ups.
Hackers Are Hijacking Remote-Support Software to Spread Malware Across Whole Networks
A modified version of the popular IT tool ScreenConnect is being used in a self-spreading attack that starts with a fake tech-support call and ends with criminals inside your entire network.
Fake Job Interviews Are Draining Bank Accounts. Here Is How the Scam Works.
Criminals posing as recruiters on LinkedIn and Indeed are tricking jobseekers into downloading malware disguised as interview software. One person lost £18,000 in cryptocurrency overnight.
REVSTEALER Leaves Four Hidden Programs Behind, One Kills Windows Defender to Mine Crypto
Elastic Security Labs found the info-stealer drops helpers that survive after it self-deletes, including one that switches off Windows Update and Defender before starting a coin miner.
Hackers Are Hiding Malware Inside Node.js, and Windows Sees Nothing Wrong
Symantec says attackers have been abusing the legitimate Node.js runtime since February 2026 to slip past defences at governments, tech firms and hotel chains.
Fake Software Download Sites Push Malware That Turns Off Windows Update
Microsoft says a long-running campaign is pushing rigged installers to Chinese-speaking users and staff at multinationals operating in China, disabling defences on the way in.
Criminals Hid a Hacking Network Inside a Cryptocurrency Blockchain. Thirty-One Companies Got Caught.
A new campaign turns blockchain technology into an untraceable instruction relay, letting attackers redirect infected computers to a new server for less than a penny per update.
Russian man charged with infecting 80,000 freelancers through fake Excel attachments
Searzhudin Aktulaev allegedly used 255 fake accounts on a freelance work platform to spread TVRAT and DarkVNC remote-control malware between 2016 and 2017.
Booby-trapped Composer packages hijack Vietnamese streaming sites to hit old iPhones
Thirteen fake theme libraries on Packagist quietly loaded ad-fraud scripts and pushed spyware at visitors running unpatched iOS, researchers say.
ClickFix: The Attack That Talks You Into Hacking Yourself
Microsoft says the fake 'prove you're not a robot' trick was the single most common way criminals broke into companies last year. The clever bit is that the victim does the hard work.
ValleyRAT Malware Hides Inside Signed Chinese Wallpaper App to Bypass Antivirus
Silver Fox is smuggling the ValleyRAT backdoor onto Windows PCs by wrapping it around QN Wallpaper, a legitimate signed program many users have already told their antivirus to trust.