Cyber
Hackers Exploit Cisco SD-WAN Flaw to Deploy Custom KeyDrift Malware
A newly tracked APT group, UAT-11473, is exploiting the CVE-2026-20127 authentication-bypass flaw in Cisco SD-WAN Controllers to deploy the KeyDrift malware.
Tag
#Malware
The latest news, analysis and stories about Malware — TECC.UZ.
18 articles
Cyber
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot
A new UEFI bootkit called BlackX, active in early 2026, leverages the Baton Drop vulnerability to bypass Secure Boot and target security software.
Cyber
Low-cost Android phones found shipping with built-in proxy malware
A malicious campaign dubbed Midnight Mimosa embeds malware into the firmware of budget Android devices, turning them into proxies.
Cyber
FakeGit malware campaign returns with 17,610 malicious GitHub repos
Over 17,000 fake GitHub repositories have been deployed to distribute the SmartLoader malware and StealC infostealer.
Cyber
Some cheap Android phones are shipping with malware baked in
New findings reveal that certain budget Android smartphones come straight out of the box pre-installed with a dangerous malware known as Midnight Mimosa.
Cyber
Russian state hackers use new RedFlick technique to push malware
The Russian state-sponsored group Star Blizzard has adopted a new malware installation tactic called RedFlick to deploy its CosmicPulse backdoor.
Cyber
Hackers exploit Citrix NetScaler zero-day to deploy web shells
Cybersecurity firms report that attackers are exploiting a Citrix NetScaler zero-day vulnerability to deploy custom web shells and malware.
Cyber
Fake LastPass Authenticator on GitHub Pushes Rapuncel Infostealer
A malicious campaign leverages SEO-optimized GitHub repositories to impersonate popular software and distribute a new infostealer dubbed Rapuncel.
Cyber
Brevo Supply-Chain Attack Injected ClickFix Scripts on Customer Sites
Brevo confirmed a security breach where attackers stole a Cloudflare API key to inject malicious ClickFix scripts into its websites and embedded customer JavaScript files.
Cyber
Malware bypasses browser checks to force install Chrome and Edge extensions
Active since mid-2025, a banking malware operation is using the KREMLIN toolkit to install malicious browser extensions that steal sensitive data.
Cyber
Malicious Admin Menu Editor Pro Plugin Backdoors 1,500 WordPress Sites
A compromise of the Admin Menu Editor Pro plugin maintainer's website led to malicious updates creating hidden admin accounts across thousands of WordPress sites.
Cyber
New Android malware encrypts files, steals data, and harasses victims
A newly discovered Android threat named Mantax Otax combines ransomware and spyware features to compromise mobile devices.
Cyber
Sleepwalker: Passive Backdoor with Its Own Command Language
Security researchers have highlighted Sleepwalker, a stealthy passive backdoor featuring its own dedicated command language.
Cyber
ToxicPanda Android malware uses VPN permissions to block Google Play
The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and adding support for 167 remote commands.
Cyber
Hackers infect Android car head units with proxy botnet malware
A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread proxy botnet malware and ad fraud tools.
Cyber
Hackers abuse FTP server banners to deliver new Windows malware
Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE.
Cyber
Hackers Poison Rust Crate arrayref to Push Infostealer Malware
Attackers compromised the maintainer account of the popular Rust arrayref crate, injecting malware that executes on developers' systems during compilation.
Cyber
Clop gang creates custom web shell for Windchill data theft attacks
Cybercriminals have developed a custom Java web shell targeting PTC Windchill and FlexPLM servers to decrypt credentials and steal sensitive data.