SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 62

Pierluigi Paganini
September 14, 2025

Malware Newsletter

npm debug and chalk packages compromised 

GPUGate Malware: Malicious GitHub Desktop Implants Use Hardware-Specific Decryption, Abuse Google Ads to Target Western Europe

Trojanized ScreenConnect installers evolve, dropping multiple RATs on a single machine

Salt Typhoon and UNC4841: Silent Push Discovers New Domains; Urges Defenders to Check Telemetry and Log Data     

KillSec Ransomware is Attacking Healthcare Institutions in Brazil 

AsyncRAT in Action: Fileless Malware Techniques and Analysis of a Remote Access Trojan  

ChillyHell: A Deep Dive into a Modular macOS Backdoor

Off Your Docker: Exposed APIs Are Targeted in New Malware Strain

Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass  

TraceRAG: A LLM-Based Framework for Explainable Android Malware Detection and Behavior Analysis

Signal-Based Malware Classification Using 1D CNNs

Recent Advancements in Machine Learning Models for Malware Detection: A Systematic Literature Review

Static and Dynamic Malware Analysis Using CycleGAN Data Augmentation and Deep Learning Techniques

APT37 Targets Windows with Rust Backdoor and Python Loader

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

facebook
linkedin
twitter

Cybercrime
Hacking
hacking news
information security news
IT Information Security
malware
Pierluigi Paganini
Security Affairs
Security News