More

    Exploits

    UEFI Secure Boot circumvented by novel HybridPetya ransomware

    Advanced UEFI-based systems could be infiltrated by the newly emergent HybridPetya ransomware strain, which is similar to Petya and NotPetya, through a nefarious EFI...

    VSCode market struck by huge influx of malicious WhiteCobra extensions

    (Image credit: Shutterstock) Researchers found 24 malicious extensions in Visual Studio Marketplace and Open VSX Registry deploying Lumma Stealer and other malware The attack targeted cryptocurrency...

    New Zealand sanctions Russian military hackers over cyberattacks on Ukraine

    New Zealand has imposed sanctions on Russian military intelligence hackers accused of cyberattacks on Ukraine, including members of a notorious hacking unit previously...

    Hackers are disguising malware as Whatsapp and Chrome installers in search results

    Hackers used SEO poisoning to push fake Signal, WhatsApp, Chrome, and VPN installers, infecting users with malware. 

    Sidewinder Hackers Weaponize Nepal Protests to Spread Cross-Platform Malware

    Sidewinder, a well-known advanced persistent threat (APT) group, has adapted its tactics to exploit the ongoing protests in Nepal, deploying a coordinated campaign of...

    BlackNevas Ransomware Encrypts Files and Steals Sensitive Data From Affected Companies

    The BlackNevas ransomware group has emerged as a significant threat since November 2024, continuously launching devastating attacks against businesses and critical infrastructure organizations across...

    Cyber attackers use images & built-in tools to bypass defences

    Research from HP Wolf Security has found that cyber attackers are continually refining established tactics in order to evade security measures and deceive users. Living-off-the-land...

    Bitdefender discovers China-linked malware

    As tensions simmer in the South China Sea, Bitdefender researchers have unveiled a sophisticated new malware framework, dubbed EggStreme, being used by China-linked advanced...

    SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 62

    Pierluigi Paganini September 14, 2025 Malware Newsletter npm debug and chalk packages compromised  GPUGate Malware: Malicious GitHub Desktop Implants Use Hardware-Specific Decryption, Abuse Google Ads to...

    Latest articles