Hackers Abuse Popular Monitoring Tool Nezha as a Stealth Trojan

Cybersecurity firm Ontinue reveals how the open-source tool Nezha is being used as a Remote Access Trojan (RAT) to bypass security and control servers globally.

·

Cyber Attack, Cyber Crime, cybersecurity, GitHub, Malware, Nezha, Ontinue, RAT, Security, TROJAN

¶¶¶¶¶

Arcane Werewolf Hacker Group Expands Arsenal with Loki 2.1 Malware Toolkit

The cyber espionage group known as Arcane Werewolf (also tracked as Mythic Likho) has significantly upgraded its offensive capabilities, targeting Russian manufacturing enterprises with a new iteration of its custom malware. According to a report by BI…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Wonderland Android Malware Targets OTPs Through Two-Way SMS Hijacking

Group-IB security researchers have uncovered a sophisticated new Android malware family dubbed “Wonderland” that represents a significant evolution in SMS-stealing threats targeting users across Uzbekistan. Unlike previous regional malware …

·

Android, cyber security, Cyber Security News, Malware

¶¶¶¶¶

Lazarus Group Embed New BeaverTail Variant in Developer Tools

North Korea’s Lazarus Group deploys a new BeaverTail variant to steal credentials and crypto using fake job lures, dev tools, and smart contracts.

·

BeaverTail, Crypto, Cyber Attack, Cyber-Attacks, cybersecurity, Darktrace, Lazarus, Malware, North Korea, Security

¶¶¶¶¶

NuGet Malware Mimic: .NET Integration Library Steals Crypto Wallets and OAuth Tokens

ReversingLabs (RL) researchers have uncovered a sophisticated malware campaign targeting the .NET developer ecosystem via the NuGet package manager. The campaign, which began in July 2025, involves 14 malicious packages designed to mimic legitimate cry…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

GachiLoader Deploys Payloads Using Obfuscated Node.js Malware

Check Point Research has uncovered a sophisticated malware distribution campaign leveraging the YouTube Ghost Network to deploy GachiLoader, a novel, heavily obfuscated Node.js-based loader designed to deliver the Rhadamanthys infostealer to unsuspecti…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

14 Malicious NuGet Packages Found Stealing Crypto Wallets and Ad Data

ReversingLabs discovers 14 malicious NuGet packages, including Netherеum.All, using homoglyphs and fake downloads to steal crypto wallets and Google Ads data.

·

Crypto, Cyber Attack, Cyber-Attacks, cybersecurity, Fraud, Malware, NuGet, ReversingLabs, SCAM, Scams and Fraud, Security

¶¶¶¶¶

New ClickFix Attack Uses Fake Browser Fix to Install DarkGate Malware

Researchers at Point Wild have discovered a new ClickFix attack campaign that tricks users into manually installing DarkGate malware via fake browser extension alerts. Learn how this attack bypasses security by using the Windows Run box and how you can…

·

ClickFix, Cyber Attack, cybersecurity, DarkGate, Fraud, Lat61, Malware, Point Wild, PowerShell, Security

¶¶¶¶¶

Parked Domains Emerge as a Primary Channel for Malware and Phishing

The landscape of domain parking has transformed dramatically over the past decade, shifting from a relatively benign monetization strategy to a sophisticated vector for cybercrime. New research into the modern parking ecosystem reveals a startling real…

·

cyber security, Cyber Security News, Malware, Phishing

¶¶¶¶¶

ClickFix Spoof of “Word Online” Used to Spread DarkGate Malware

A sophisticated social engineering campaign leveraging a fake “Word Online” extension error message has been discovered distributing the notorious DarkGate malware. This attack employs the increasingly popular “ClickFix” techniq…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

1010.cx

1010.cx

Category: Malware

Hackers Abuse Popular Monitoring Tool Nezha as a Stealth Trojan

Arcane Werewolf Hacker Group Expands Arsenal with Loki 2.1 Malware Toolkit

Wonderland Android Malware Targets OTPs Through Two-Way SMS Hijacking

Lazarus Group Embed New BeaverTail Variant in Developer Tools

NuGet Malware Mimic: .NET Integration Library Steals Crypto Wallets and OAuth Tokens

GachiLoader Deploys Payloads Using Obfuscated Node.js Malware

14 Malicious NuGet Packages Found Stealing Crypto Wallets and Ad Data

New ClickFix Attack Uses Fake Browser Fix to Install DarkGate Malware

Parked Domains Emerge as a Primary Channel for Malware and Phishing

ClickFix Spoof of “Word Online” Used to Spread DarkGate Malware