EmEditor Website Breach Used to Spread Infostealer Malware

The popular text editor EmEditor fell victim to a sophisticated supply chain attack between December 19-22, 2025, in which attackers compromised the official website to distribute malware-laced installation packages. Emurasoft, Inc., the software&#8217…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Popular NPM Package lotusbail Exposed as Trojan Stealing WhatsApp Chats

Koi Security uncovers lotusbail, a malicious npm package with 56K downloads that steals WhatsApp messages and installs a persistent backdoor. Learn how to protect your data.

·

Cyber Attack, cybersecurity, Koi Security, Koi Security uncovers lotusbail, lotusbail, Malware, npm, Privacy, Security, WhatsApp

¶¶¶¶¶

Evasive Panda APT: Malware Delivery via AitM and DNS Poisoning

Evasive Panda, a sophisticated threat actor known by the aliases Bronze Highland, Daggerfly, and StormBamboo, has escalated its offensive capabilities through a two-year campaign that has deployed advanced attack techniques,, including adversary-in-the…

·

APT, cyber security, Cyber Security News, Malware

¶¶¶¶¶

NtKiller Malware Advertised on Dark Web With Claims of Antivirus and EDR Bypass

A new and sophisticated defensive evasion tool dubbed “NtKiller” has surfaced on underground cybercrime forums, marketed by a threat actor known as “AlphaGhoul.” The utility is being aggressively promoted as a high-end solution…

·

cyber security, Cyber Security News, Dark Web, Malware

¶¶¶¶¶

WebRAT Malware Campaign Leveraging GitHub-Hosted Proof-of-Concept Code

Cybersecurity specialists from the Solar 4RAYS cyberthreat research center, a division of the Solar Group, have uncovered a dangerous new malware strain dubbed “Webrat.” This sophisticated threat has been identified as a multi-functional re…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

New MacSync Stealer Disguised as Trusted Mac App Hunts Saved Passwords

Jamf security experts have found a new version of MacSync Stealer. Disguised as a zk-call app, it uses official notarization to bypass security and steal your saved passwords.

·

ClickFix, Cyber Attack, cybersecurity, Infostealer, Jamf Threat Labs, Macbook, macOS, MacSync Stealer, Malware, Password, Privacy, Security

¶¶¶¶¶

Indian Income Tax–Lure Campaign Deploying Multi-Stage Malware Against Businesses

Tax-themed phishing campaigns have intensified in recent months, capitalizing on the heightened awareness surrounding India’s Income Tax Return (ITR) filing season. Public discussions about refund timelines and compliance deadlines create an idea…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Threat Actors Impersonate Korean TV Writers to Deliver Malware

North Korean-backed threat actors are impersonating writers from major Korean broadcasting companies to deliver malicious documents and establish initial access to targeted systems, according to threat intelligence research by Genians Security Center. …

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

MacSync Stealer Malware Targets macOS Users Through Digitally Signed Apps

Jamf Threat Labs has uncovered a new MacSync Stealer campaign that significantly raises the bar for macOS malware delivery by abusing Apple’s own trust mechanisms. The latest variant is delivered as a fully code‑signed and notarized Swift application, …

·

cyber security, Cyber Security News, macOS, Malware

¶¶¶¶¶

Frogblight Malware Targets Android Users With Fake Court and Aid Apps

Kaspersky warns of ‘Frogblight,’ a new Android malware draining bank accounts in Turkiye. Learn how this ‘court case’ scam steals your data and how to stay safe.

·

Android, Banking, Cyber Attack, cybersecurity, Frogblight, Kaspersky, Malware, Securelist, Security, TROJAN, Turkiye

¶¶¶¶¶

1010.cx

1010.cx

Category: Malware

EmEditor Website Breach Used to Spread Infostealer Malware

Popular NPM Package lotusbail Exposed as Trojan Stealing WhatsApp Chats

Evasive Panda APT: Malware Delivery via AitM and DNS Poisoning

NtKiller Malware Advertised on Dark Web With Claims of Antivirus and EDR Bypass

WebRAT Malware Campaign Leveraging GitHub-Hosted Proof-of-Concept Code

New MacSync Stealer Disguised as Trusted Mac App Hunts Saved Passwords

Indian Income Tax–Lure Campaign Deploying Multi-Stage Malware Against Businesses

Threat Actors Impersonate Korean TV Writers to Deliver Malware

MacSync Stealer Malware Targets macOS Users Through Digitally Signed Apps

Frogblight Malware Targets Android Users With Fake Court and Aid Apps