Operation WrtHug hijacks 50,000+ ASUS routers to Bìbuild global botnet
Operation WrtHug hijacks 50,000+ ASUS routers to Bìbuild global botnet Pierluigi Paganini November 19, 2025 Operation WrtHug hijacks tens of...
Malware
Sneaky 2FA Phishing Kit Adds BitB Pop-ups Designed to Mimic the Browser Address Bar
The malware authors associated with a Phishing-as-a-Service (PhaaS) kit known as Sneaky 2FA have incorporated Browser-in-the-Browser (BitB) functionality into their...
Microsoft mitigated the largest cloud DDoS ever recorded, 15.7 Tbps
Microsoft mitigated the largest cloud DDoS ever recorded, 15.7 Tbps Pierluigi Paganini November 17, 2025 Microsoft says the Aisuru botnet...
New EVALUSION ClickFix Campaign Delivers Amatera Stealer and NetSupport RAT
Nov 17, 2025Ravie Lakshmanan Cybersecurity researchers have discovered malware campaigns using the now-prevalent ClickFix social engineering tactic to deploy Amatera...
North Korean threat actors use JSON sites to deliver malware via trojanized code
North Korean threat actors use JSON sites to deliver malware via trojanized code Pierluigi Paganini November 17, 2025 North Korean...
RondoDox expands botnet by exploiting XWiki RCE bug left unpatched since February 2025
RondoDox expands botnet by exploiting XWiki RCE bug left unpatched since February 2025 Pierluigi Paganini November 17, 2025 RondoDox botnet...
Security Affairs newsletter Round 550 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 550 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini November 16, 2025 A new round of...
RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet
Nov 15, 2025Ravie LakshmananMalware / Vulnerability The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against...
Conduent Faces Financial Hit, Lawsuits from Breach Affecting 10.5 Million
The problems for Conduent Business Solutions 10 months after the solutions and services provider in January detected intruders in...
Chrome extension “Safery” steals Ethereum wallet seed phrases
Chrome extension “Safery” steals Ethereum wallet seed phrases Pierluigi Paganini November 13, 2025 Malicious Chrome extension “Safery: Ethereum Wallet” steals...
A new round of Europol’s Operation Endgame dismantled Rhadamanthys, Venom RAT, and Elysium botnet
A new round of Europol’s Operation Endgame dismantled Rhadamanthys, Venom RAT, and Elysium botnet Pierluigi Paganini November 13, 2025 Europol’s...
New Danabot Windows version appears in the threat landscape after May disruption
New Danabot Windows version appears in the threat landscape after May disruption Pierluigi Paganini November 12, 2025 DanaBot returns after...
Fantasy Hub: Russian-sold Android RAT boasts full device espionage as MaaS
Fantasy Hub: Russian-sold Android RAT boasts full device espionage as MaaS Pierluigi Paganini November 11, 2025 Researchers found Fantasy Hub,...
WhatsApp Malware ‘Maverick’ Hijacks Browser Sessions to Target Brazil’s Biggest Banks
Threat hunters have uncovered similarities between a banking malware called Coyote and a newly disclosed malicious program dubbed Maverick that...
GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites
Nov 11, 2025Ravie LakshmananMalware / Network Security The malware known as GootLoader has resurfaced yet again after a brief spike...
