To the victim, the .lnk file looked like it opened a folder or launched a trusted application, but in reality, it could execute an arbitrary script, a dropper, or living-off-the …
Tag:
malware
Safety & Security
Google Uncovers PROMPTFLUX Malware That Uses Gemini AI to Rewrite Its Code Hourly
by David Walker
Nov 05, 2025Ravie LakshmananArtificial Intelligence / Threat Intelligence Google on Wednesday said it discovered an unknown threat actor using an experimental Visual Basic Script (VB Script) malware dubbed PROMPTFLUX that …
Safety & Security
Rhysida ransomware exploits Microsoft certificate to slip malware past defenses
by David Walker
“Microsoft Trusted Signing certificates are issued with a 72-hour validity period. After that, the certificates expire and need to be renewed. This short period makes the standard process of purchasing …
Safety & Security
Google Identifies Three New Russian Malware Families Created by COLDRIVER Hackers
by David Walker
Oct 21, 2025Ravie LakshmananCyber Espionage / Threat Intelligence A new malware attributed to the Russia-linked hacking group known as COLDRIVER has undergone numerous developmental iterations since May 2025, suggesting an …
Safety & Security
China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN Networks
by David Walker
Sep 27, 2025Ravie LakshmananMalware / Network Security Telecommunications and manufacturing sectors in Central and South Asian countries have emerged as the target of an ongoing campaign distributing a new variant …
Safety & Security
UNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE Malware
by David Walker
An Iran-nexus cyber espionage group known as UNC1549 has been attributed to a new campaign targeting European telecommunications companies, successfully infiltrating 34 devices across 11 organizations as part of a …
Safety & Security
Linux Malware Delivered via Malicious RAR Filenames Evades Antivirus Detection
by David Walker
Cybersecurity researchers have shed light on a novel attack chain that employs phishing emails to deliver an open-source backdoor called VShell. The “Linux-specific malware infection chain that starts with a …
Safety & Security
Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures
by David Walker
Aug 18, 2025Ravie LakshmananMalware / Enterprise Security The threat actors behind the Noodlophile malware are leveraging spear-phishing emails and updated delivery mechanisms to deploy the information stealer in attacks aimed …
Safety & Security
Project Ire: Microsoft’s autonomous AI agent that can reverse engineer malware
by David Walker
How Project Ire works Microsoft Defender scans over one billion active devices monthly that routinely require manual review of software by experts, resulting in errors and alert fatigue. Hence, Project …