topic
Stealers, RATs, loaders, botnets and backdoors.
Want to defend against threats like these? Get hands-on cybersecurity training at Skillmate
37 posts, newest first
Suspected nation-state hackers developed NetamLoader, a sophisticated malware targeting a specialized version of Windows 10 used by...
Skillmate
Cybersecurity researchers disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry, allowing...
Skillmate
A crypto-mining and backdoor campaign that abused Hugging Face model repositories returned days after being taken down, with its most...
Skillmate
WordPress security company Wordefence reported ongoing PHP2Shell-related requests across over 5 million protected sites, indicating...
Skillmate
Cisco Talos discovered a new malware framework called NIK C2 that can use victims' OpenAI API keys to perform AI queries, charging the...
Skillmate
A new Android malware-as-a-service operation, MR ROBOT, has been found targeting Indian bank customers, intercepting text messages and...
Skillmate
Attackers are distributing malware through fake ChatGPT and Claude desktop applications, using legitimate, digitally signed executables...
Skillmate
Aokigahara malware has expanded its capabilities to target AI tools, compromising sensitive business data and developer infrastructure from...
Skillmate
The Australian Signals Directorate (ASD) gained access to the backend of a criminal's Amadey malware operation and cut off access to...
Skillmate
Serbian strongman leader Aleksandar Vučić's regime targeted University of Belgrade Rector Vladan Đokić with powerful zero-click spyware...
Skillmate
Threat actors are using Microsoft Teams' external chat creation feature to impersonate IT support and deploy malware, according to Arctic...
Skillmate
A threat actor has infected 953 online stores, primarily running Magento, with loader code as part of a long-lasting campaign since July...
Skillmate
A rentable Android spyware kit called uCreator has been found to take over Telegram and WeChat accounts by hiding its code inside tampered...
Skillmate
A new UEFI bootkit called BlackX was deployed in early 2026 to target diplomatic agencies in Central Asia, exploiting the Baton Drop...
Skillmate
Diplomatic organizations in Tajikistan, Uzbekistan, and Turkmenistan have been targeted by the BlackX UEFI bootkit, suspected to be...
Skillmate
Threat actors have attempted to use PHP2Shell vulnerabilities to spread a Mirai botnet, but no successful compromise has been confirmed...
Skillmate
The Russian state-sponsored hacking group Sandworm, in collaboration with UAC-0099, executed a destructive attack on a Ukrainian logistics...
Skillmate
The attack began with a phishing email containing a malicious attachment, allowing UAC-0099 to gain initial access. They later deployed a...
Skillmate
The LiteLLM Python package has been compromised, distributing a credential stealer and backdoor to users through PyPI wheels and Docker...
Skillmate
A cyberattack exploited malicious Google search results related to Amazon, using the 'finger' utility to deploy a CAPTCHA that installs...
Skillmate
Cybersecurity researchers have disclosed details of a China-aligned threat cluster known as Bronze Sandcastle, which has been targeting...
Skillmate
A Belarus-aligned hacktivist group, known as Partisan Zmiy or Cyber Partisans, infiltrated a Russian healthcare organization's network for...
Skillmate
A threat actor breached TeamUpdraft's website, potentially compromising UpdraftCentral connection keys used to send commands to connected...
Skillmate
The iPhone of Vladan Đokić, rector of the University of Belgrade, was infected with NSO Group's Pegasus spyware six days before Serbia's...
Skillmate
APT28, a Russia-linked state-sponsored threat actor, breached a NATO naval shipbuilder in a targeted cyber-espionage campaign. The...
Skillmate
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware The vulnerability or weakness The vulnerability was not a...
Skillmate
Cybersecurity researchers have disclosed a new ClickFix delivery platform called ROMULUS, which is being used to distribute malware like...
Skillmate
Spyware vendors are using targeted ad bidding to track individuals and organizations of interest, turning ad impressions into a vector for...
Skillmate
Hackers compromised AOMEI's update servers to distribute malware through its backup software, targeting organizations globally. The...
Skillmate
Vladan Ðokić, the rector of the University of Belgrade, was targeted with Pegasus spyware, according to the SHARE Foundation and The...
Skillmate
Threat actors used a genuine, signed copy of Siemens Software Center to distribute malicious DLL files, infecting Windows PCs via ClickFix...
Skillmate
Threat actors are exploiting a chain of four vulnerabilities in Plex Media Server, collectively known as Plex2Shell, to deploy...
Skillmate
A security notice from Rank Math revealed that copies of the paid Rank Math PRO plugin distributed between October 15 and 16 contained...
Skillmate
The threat actor behind the GhostAction supply chain attack expanded their tactics by injecting a credential stealer disguised as a fake...
Skillmate
A fake Web3 accelerator named Apex Accelerator distributed malware and backdoors to Windows and macOS systems through malicious npm...
Skillmate
This attack caused significant disruptions to operations, as legitimate software releases were compromised, leading to potential remote...
Skillmate