SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 65

Pierluigi Paganini
October 05, 2025

Malware Newsletter

Smash and Grab: Aggressive Akira Campaign Targets SonicWall VPNs, Deploys Ransomware in an Hour or Less

First Malicious MCP in the Wild: The Postmark Backdoor That’s Stealing Your Emails  

EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks  

Phantom Taurus: A New Chinese Nexus APT and the Discovery of the NET-STAR Malware Suite  

SVG Phishing hits Ukraine with Amatera Stealer, PureMiner  

CABINETRAT backdoor used by UAC-0245 for targeted cyberattacks against SOU (CERT-UA#17479) 

Klopatra: exposing a new Android banking trojan operation with roots in Turkey  

Check Your Socks – A Deep Dive into soopsocks PyPI Package  

New spyware campaigns target privacy-conscious Android users in the UAE  

Rhadamanthys 0.9.x – walk through the updates

Detour Dog: DNS Malware Powers Strela Stealer Campaigns

Cavalry Werewolf raids Russia’s public sector with trusted relationship attacks         

Confucius Espionage: From Stealer to Backdoor

Zero-Day Ransomware Attack Detection Using Static Portable Executable Header Features

Robust Hashing for Improved CNN Performance in Image-Based Malware Detection

Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks

Defending against Stegomalware in Deep Neural Networks with Permutation Symmetry

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

facebook
linkedin
twitter

Cybercrime
data breach
Hacking
hacking news
information security news
IT Information Security
malware
Newsletter
Pierluigi Paganini
Security Affairs
Security News