Five-Layer Fileless Malware Uses JScript and PowerShell to Evade AMSI and Load .NET Payload

An active phishing campaign using a five-layer, fileless malware loader to evade Microsoft’s Antimalware Scan Interface (AMSI), static detection controls, and disk-based forensic analysis. The campaign delivers a Windows Script Host JScript payload ins…

·

cyber security, Cyber Security News, JavaScript, Malware

¶¶¶¶¶

OkoBot Malware Uses ClickFix, Hidden Browser Extensions to Steal Crypto Data

Kaspersky says OkoBot targets crypto users through fake software, stealing wallet files, seed phrases and passwords while recording activity inside wallet apps.

·

Crypto, Kaspersky, Malware, OkoBot, Security, Seed Phrases, Windows

¶¶¶¶¶

China-Linked Daxin Backdoor Resurfaces in Taiwan Alongside New STUPIG SYSTEM-Level Malware

The China-linked Daxin backdoor has resurfaced in an active intrusion targeting a Taiwan-based subsidiary of a multinational high-tech manufacturer, exposing the enduring reach of an espionage operation first publicly detailed in 2022. Daxin’s return i…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

OkoBot Malware Uses ClickFix and SeedHunter to Steal Ledger and Trezor Seed Phrases

A newly documented malware framework dubbed OkoBot is targeting cryptocurrency users with a multi-stage intrusion chain designed to capture Ledger and Trezor recovery phrases, browser credentials, wallet files, keystrokes, screenshots, and application …

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

LabubaRAT Rust Malware Masquerades as NVIDIA Software to Backdoor Windows Systems

A previously undocumented Rust-based remote access trojan, dubbed LabubaRAT, which masquerades as legitimate NVIDIA software to establish persistent access on Windows systems. The malware was identified by the company’s Adversary Pursuit Group (APG) an…

·

cyber security, Cyber Security News, Malware, Windows

¶¶¶¶¶

11 Malicious NuGet Game Cheat Packages Deploy Pepesoft Windows Surveillance Malware

11 malicious NuGet packages masquerading as game cheats, automation bots, and management “panels” that deploy a Windows payload called pepesoft.exe. The packages were published as .NET command-line tools, enabling users to install them through the dotn…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Artlist ClickFix Campaign Uses Infostealer-Stolen WordPress Credentials to Deploy RAT Malware

A threat campaign discovered in mid-July 2026 abused the compromised Artlist subdomain new-blog. artlist[.]io to distribute a Remote Access Trojan through a fake CAPTCHA prompt. The operation combined stolen WordPress credentials, blockchain-based Ethe…

·

cyber security, Cyber Security News, Malware, Wordpress

¶¶¶¶¶

Adaptive Malware Could Evade Signature Detection by Regenerating Its Attack Capabilities

Adaptive, AI-driven malware could challenge a foundational assumption in enterprise defense: that a malicious program’s exploitation logic remains fixed after deployment. New research on adaptive computer worms argues that a self-replicating agent pair…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Siggen Backdoor Hits Windows Developers Via Infected Visual Studio Projects

Dr.Web details Siggen Windows backdoor that uses Steam for C2, steals credentials and crypto data and infects Visual Studio projects to spread among developers.

·

backdoor, cryptocurrency, cybersecurity, Malware, SCAM, Security, Siggen, Steam, Supply Chain, TROJAN, Visual Studio

¶¶¶¶¶

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

Microsoft details GigaWiper, a destructive Windows backdoor that can wipe disks, encrypt files and give attackers remote access to compromised systems globally.

·

backdoor, Crucio, cybersecurity, FlockWiper, GigaWiper, Malware, Microsoft, Security, Windows

¶¶¶¶¶

1010.cx

1010.cx

Category: Malware