Malware

Latest

Malware

Multiple Government Agencies Warn of Long-Term, Potentially Large-Scale BRICKSTORM Malware Campaign by Chinese Hackers

December 8, 2025

A new warning documents an ongoing campaign by Chinese hackers making use of the sophisticated BRICKSTORM malware to target public sector organizations and IT companies for long-term espionage purposes. The average dwell time for these documented breaches is a little over a year.

Digital skull on screen showing AI malware

Cyber Security News

Google TIG: Dynamic AI Malware That Adapts to Defense Conditions on the Fly

November 10, 2025

Google's report of novel AI-enabled malware in the wild is a game changer if these capabilities are now being picked up by sophisticated attackers. It identifies two specific new malware families, "PROMPTFLUX" and "PROMPTSTEAL," that are the first to incorporate a "just in time" dynamic function creation feature that draws on an LLM.

Access granted message on screen showing Russian malware with LLM

Cyber Security News

Russian Malware Found Using LLM To Issue Real-Time Commands

July 23, 2025

A new Russia-based family of malware has been observed using a large language model (LLM) to issue commands on compromised systems in real time, which can potentially improve attacker capability by allowing them to shift tactics during an attack without having to introduce new payloads.

Digital skull showing DeepSeek AI malware

Cyber Security News

New Tenable Report Finds DeepSeek Can Be Jailbroken to Create Malware

March 24, 2025

The malware that the researchers were able to coax out of DeepSeek was rudimentary and required some manual code editing to make it functional. But the incident demonstrates that the guardrails preventing malicious behavior in generative AI systems remain thin.

Bug on screen showing malware distribution with GitHub accounts

Cyber Security News

Threat Actor Stargazer Goblin Uses Over 3,000 GitHub Accounts for Malware Distribution

August 2, 2024

Security researchers have discovered a network of over 3,000 GitHub accounts involved in an extensive malware distribution campaign.

Handcuffs on keyboard showing law enforcement operation crackdown on dropper malware and botnets

Cyber Security News

International Law Enforcement Operation Cracks Down on Some of the Biggest Dropper Malware and Botnets

June 3, 2024

A Europol-headed law enforcement operation has put a serious dent in the dropper malware ecosystem, disrupting the botnets that these dropper systems rely on to function, with over 100 servers and 2,000 domains impacted across about a dozen countries.

Cyber Security Insights

Securing Modern Banking Applications – Do’s and Don’ts

March 20, 2024

It’s no secret that banking applications – both traditional and emerging fintech apps – still remain a prime target for financially-motivated cyberattacks. Cybercriminals are money-motivated, targeting the applications and institutions with the potential for the highest reward.

Computer displaying red code showing self-replicating malware and GenAI

Cyber Security News

Researchers Develop Self-Replicating Malware “Morris II” Exploiting GenAI

March 8, 2024

The self-replicating malware's name refers back to the infamous "Morris worm" that tore through the early version of the internet in the late 80s. Morris II focuses on tricking GenAI into turning input into malicious output and spreading it.

Computer code on a screen with a skull showing crypto drainer malware

Cyber Security News

$87 Million Lost to Crypto Drainer as Inferno Malware Fools Customers With Coinbase, Seaport Connection Protocols

January 18, 2024

The Inferno Drainer malware that plagued the crypto world throughout 2023 ultimately compromised about 130,000 victims and stole about $87 million in total, according to a new report from Group-IB. It was part of a broader movement of "crypto drainer" services that some security experts believe is poised to become the next big thing in cybercrime in 2024.

Man covering mouth in fear showing malware botnet Qakbot return

Cyber Security News

Qakbot Malware Botnet Operators Continue Spam Campaigns Despite Infrastructure Seizure by International Law Enforcement

October 10, 2023

The long-running Qakbot malware botnet was disrupted by international law enforcement action in August, but its operators appear to still have some capability and are continuing to run spam email campaigns that attempt to pass ransomware.

Malware

Multiple Government Agencies Warn of Long-Term, Potentially Large-Scale BRICKSTORM Malware Campaign by Chinese Hackers

Google TIG: Dynamic AI Malware That Adapts to Defense Conditions on the Fly

Russian Malware Found Using LLM To Issue Real-Time Commands

New Tenable Report Finds DeepSeek Can Be Jailbroken to Create Malware

Threat Actor Stargazer Goblin Uses Over 3,000 GitHub Accounts for Malware Distribution

International Law Enforcement Operation Cracks Down on Some of the Biggest Dropper Malware and Botnets

Securing Modern Banking Applications – Do’s and Don’ts

Researchers Develop Self-Replicating Malware “Morris II” Exploiting GenAI

$87 Million Lost to Crypto Drainer as Inferno Malware Fools Customers With Coinbase, Seaport Connection Protocols

Qakbot Malware Botnet Operators Continue Spam Campaigns Despite Infrastructure Seizure by International Law Enforcement

Russian Phishing Campaign Targets Messaging App Users to Steal Recovery Keys and Take Over Accounts

“Cyber Shield,” Britain’s Agentic AI Cyber Defense Project, Prepares for the World of Machine-Speed Attacks

Data Breach Hits AssuranceAmerica Exposing Personal Information of Nearly 7 Million People

Data Breach at Aflac Japan Impacts 4.38 Million Customers and Sales Agents