Threatline

News Timeline

Search tips

ransomware hospital — both words

"data breach" — exact phrase

malware -android — exclude a word

(apple OR microsoft) patch — either company, plus patch

ransom* — a wildcard match

Searches article titles, summaries, keywords and sources. Filters use publication dates.

Results for “"malware"”

181–190 of 4,931 articles

Best match · title matches first

Bleeping Computer

5 months ago

Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with running a seemingly benign GitHub repository could execute a malicious payload that is invisible to both security agents and human reviewers. [...]

clean github repo github repo github repository

PreviousPage 19 of 494Next

ai coding agents

agentic coding tool

8 more topics

agentic malware malicious payload payload benign github repository security agents human reviewers invisible

The Hacker News

5 months ago

New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks

A newly discovered cyber attack campaign has been observed delivering a previously undocumented malware family called SharkLoader that acts as a loader for deploying Cobalt Strike Beacon on compromised hosts. Kaspersky, which is tracking the activity under the moniker StrikeShark, said the campaign has targeted a diplomatic organization in Indonesia, government organizations in Taiwan,

sharkloader cobalt strike strikeshark malware beacon

9 more topics

compromised hosts kaspersky indonesia taiwan diplomatic organization government organizations campaign activity cyberattacks

The Hacker News

5 months ago

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

Cybersecurity researchers have flagged yet another evolution of the supply chain attack linked to the Mini Shai-Hulud, Miasma, and Hades malware family that has compromised a new set of npm packages, even as it has propagated to the Go ecosystem. "The latest activity includes malicious npm releases affecting LeoPlatform and RStreams packages, GitHub Actions workflow abuse, and a related Go

supply chain attack miasma miasma malware mini shai-hulud hades malware

7 more topics

npm packages npm releases github actions workflow abuse go ecosystem leoplatform rstreams

Bleeping Computer

5 months ago

New macOS malware embeds fake errors to confuse AI analysis tools

A newly discovered macOS malware dubbed "Gaslight" is designed to confuse AI-assisted malware analysis tools by hiding prompt injection strings and fake debugging data within the executable. [...]

macos malware gaslight prompt injection strings fake debugging data ai analysis tools

4 more topics

ai-assisted malware analysis tools executable malware fake errors

The Hacker News

5 months ago

New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis

A previously undocumented Rust-based macOS implant and information stealer has been found to embed a prompt injection payload designed to trick a malware analyst's artificial intelligence (AI) tools and trick it into aborting or refusing an analysis of the artifact. The malware has been codenamed Gaslight owing to this deceptive behavior. It's been assessed with high confidence that the tool is

gaslight macos malware prompt injection ai-assisted analysis

8 more topics

rust-based macos implant information stealer payload malware analyst artificial intelligence tools artifact

Bleeping Computer

5 months ago

Malicious Edge extension abuses Native Messaging as bridge to malware

A malicious Microsoft Edge extension dubbed 'Edgecution' has been used in a ransomware attack to escape the browser sandbox and deploy a Python-based backdoor. [...]

malicious edge extension edge extension native messaging bridge to malware edgecution

7 more topics

ransomware attack browser sandbox sandbox escape python-based backdoor backdoor malware microsoft edge extension

The Register

5 months ago

Microsoft uses AI to link two malware operations in racketeering suit

200+ C2 servers linked to StealC and Amadey shut down

microsoft ai link two malware operations malware operations racketeering suit

7 more topics

200+ c2 servers c2 servers stealc amadey shutdown racketeering lawsuit

The Hacker News

5 months ago

Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered

A coordinated law enforcement operation, in partnership with private sector companies, including Bitdefender, Bitsight, ESET, and Microsoft, has resulted in the takedown of criminal infrastructure powering Amadey and StealC. "The main common goal was to disrupt the 'assembly lines' cybercriminals use to launch ransomware, financial fraud, and attacks on critical infrastructure," Europol said in

amadey stealc malware ransomware financial fraud

10 more topics

stolen credentials takedown europol bitdefender bitsight eset microsoft assembly lines critical infrastructure cybercriminals

Bleeping Computer

5 months ago

Amadey, StealC malware operations disrupted in Operation Endgame action

Microsoft, Europol, and international partners have disrupted infrastructure used by the Amadey and StealC malware operations as part of Operation Endgame, which targets cybercriminal services and ransomware gangs. [...]

amadey stealc malware operations operation endgame microsoft

7 more topics

europol international partners infrastructure cybercriminal services ransomware gangs malware disrupted

The Register

5 months ago

Gizmodo readers hit with ClickFix malware prompts after account compromise

Infosec buffs say Windows users could have been infected with a nasty trojan, while Mac users got off lightly

gizmodo readers clickfix malware malware prompts account compromise infosec buffs

6 more topics

windows users mac users nasty trojan infected got off lightly malware