Malware

Cybersecurity 4 min Attackers Are Exploiting AhsayCBS Backup Servers, and the Latest Version Is Not Safe Huntress saw attackers chain two AhsayCBS flaws to plant webshells and a cryptominer. Version 10.3.4, named as... PR Priya Nair 12 Oct Cyber Threat Intel 5 min A Google Ad for ChatGPT Led to a Real chatgpt.com Page That Installed a Trojan Attackers published a Custom GPT called "Plus 5.6" that sent every visitor to a fake backup site. OpenAI took... PR Priya Nair 1 Oct Cyber Threat Intel 5 min Uninstall RatHat and It Reinstalls Itself A new Android malware family escapes the app sandbox by switching on wireless debugging and pairing with the p... PR Priya Nair 23 Sep Cyber Threat Intel 5 min The Backdoor Checks a Private GitHub Repository for Orders Zscaler's Operation RapidRust report finds APT36 running a Rust implant over the GitHub API, with commands iss... PR Priya Nair 21 Sep AI & ML 6 min The Evidence That AI Wrote PhantomRaven Is Its Comments CrowdStrike calls the stealer almost certainly machine-generated, on redundant commenting, a leftover placehol... KE Kenji Tanaka 20 Sep Cyber Threat Intel 5 min Three Agencies Blamed Iran for CHOSEN BRICK. Only the FBI Named the Ministry. CHOSEN BRICK gives every victim their own Telegram bot. The NCSC, FBI and AIVD signed one advisory and stopped... PR Priya Nair 17 Sep Cyber Threat Intel 6 min BambooToken Malware Takes Its Orders Over MQTT, the Smart-Device Protocol Infected machines never connect to the attacker. They subscribe to a topic on a message broker and wait. About... PR Priya Nair 17 Sep Cybersecurity 6 min Stolen Claude Sessions Are Being Resold, and MFA Does Not Stop It Six commodity infostealers now sort Claude sessions out of what they harvest. The economic shape is cryptojack... KE Kenji Tanaka 1 Sep Cybersecurity 7 min Five Chrome Extensions Were Bought From Their Authors, Then Poisoned by Update For five of these, store review never had a chance. They were legitimate extensions, bought from their authors... KE Kenji Tanaka 31 Aug Cybersecurity 6 min One Trojan, Three Lures: MyCERT Warns of Android Banking Malware Hitting Maybank and CIMB Users MyCERT's 6 June advisory details an active Android banking-trojan campaign using three lure brands — Delivery4... CY Cyber Team 7 Jun Cybersecurity 12 min Megalodon Campaign Backdoors 5,561 GitHub Repos in Six Hours — Inside a Mass GitHub Actions Supply-Chain Attack An automated campaign called Megalodon pushed 5,718 malicious commits to 5,561 GitHub repos on 18 May 2026, ex... CY Cyber Team 23 May Cybersecurity 5 min AI Is Now Writing Malware: How LLMs Have Become the New Hacker's IDE Large language models are now being used to write functional malware, generate exploit code, and automate atta... CY Cyber Team 6 May