MalwareThe Register·3 hours ago
You don't want this Sleepwalker backdoor on your Windows machine
Its own command language, 23 instructions - signs point to 'well-resourced operation rather than an opportunistic one'
← Back
MalwareThe Hacker News·7 hours ago
Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
Cybersecurity researchers have discovered that Weedhack malware is being actively distributed to gamers through fake Minecraft client websites that closely mimic legitimate projects with copied branding and features. McAfee Labs reported blocking over 6,300 attempts to access these malicious sites, which use SEO poisoning techniques and lookalike gaming websites to deceive users into downloading the malware.
Read full article at The Hacker News ↗Related Articles
MalwareDark Reading·4 hours ago
Foul Language: WordlistLoader Disguises Malware as Ordinary Text
ClickFix-style threat campaigns are employing a new evasion technique called WordlistLoader to disguise malware delivery and distribute Amatera, an infostealer that has been growing in prevalence. The obfuscation method leverages ordinary text files to bypass security detection mechanisms, allowing attackers to successfully deliver the malicious payload to targets.
MalwareMalwarebytes Labs·8 hours ago
Fake GTA 6 Extended Look and demo sites deliver an infostealer
Threat actors are leveraging excitement around leaked GTA 6 content by hosting fraudulent "Play Now" sites that distribute an infostealer capable of harvesting stored browser credentials. Users visiting these deceptive pages risk compromise of their password managers and cached authentication data. The campaign demonstrates how high-profile leaks continue to serve as effective social engineering vectors for credential theft operations.
MalwareDark Reading·10 hours ago
Tricky 'SynkLoader' Multitool May Herald Ransomware
SynkLoader, an advanced multilingual malware family, employs screen hijacking techniques to steal passwords while offering a range of novel capabilities that position it as a potential precursor to ransomware deployment. The malware revives an older attack method—screen hijacking—to effectively compromise credentials while maintaining additional functional tools for follow-on attacks.