Avalon Malware Uses Legal Document Lure to Deliver CrownX Ransomware Capabilities

A previously undocumented malware framework, tracked as Avalon, that uses a spoofed legal-document lure and a multi-stage, fileless-oriented chain to deliver a ransomware component internally labeled CrownX. The campaign demonstrates a shift toward con…

·

cyber security, Cyber Security News, Malware, Ransomware

¶¶¶¶¶

TimbreStealer Malware Targets Mexico Companies With Advanced Evasion Techniques

A new campaign linked to the TimbreStealer information stealer that specifically targets Mexican companies, employing layered evasion and sophisticated runtime tricks to frustrate detection and analysis. Researchers Euler Neto and Cristóbal Tárraga det…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Verified X Sponsored Ad Spreads Mac Malware While ConsentFix Hijacks Microsoft 365 Accounts

A Mac-targeting ClickFix campaign amplified through a verified X sponsored ad, and a novel browser-based hijack technique called ConsentFix that exfiltrates Microsoft 365 session tokens without traditional malware. Researchers at Jamf and Malwarebytes …

·

cyber security, Cyber Security News, Malware, Microsoft

¶¶¶¶¶

FBI Seizes NetNut Domains as Google Disrupts 2M Device Proxy Network

FBI and Google disrupt NetNut after domains linked to its residential proxy network are seized, exposing abuse of 2 million TVs and streaming devices worldwide.

·

Alarum, Cyber Crime, cybersecurity, FBI, Google, Israel, Malware, NetNut, Popa, proxy, residential proxy

¶¶¶¶¶

New PamStealer Malware Targets macOS Users via Fake Maccy Clipboard App

The newly spotted PamStealer is spreading through a fake Maccy clipboard app and steal Mac passwords, browser data and clipboard content.

·

Apple, Clipboard, Infostealer, Maccy, macOS, Malware, PamStealer, Security

¶¶¶¶¶

Pegasus Spyware Hacked European Parliament Member Investigating Spyware Abuse

A newly disclosed forensic investigation has revealed that Pegasus spyware was used to hack a sitting Member of the European Parliament (MEP) who was actively investigating spyware abuses across the European Union. This raises serious concerns about su…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Fake Google and Cloudflare Verification Pages Spread StealC, HijackLoader, and NetSupport Malware

Threat actors are currently exploiting sophisticated ClickFix social engineering campaigns that mimic Google and Cloudflare verification systems to distribute several high-impact malware families, including StealC, HijackLoader, NetSupport RAT, and new…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

SharkLoader Malware Uses Perfect DLL Hijacking to Execute Cobalt Strike in Memory

SharkLoader, used by an intrusion cluster tracked as StrikeShark to deliver Cobalt Strike Beacon entirely in memory across a wide international footprint. The campaign combines opportunistic exploitation of exposed internet-facing infrastructure with c…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Google Disrupts NetNut Residential Proxy Botnet Used for Malware C2 and Password Spray Attacks

Google has disrupted the NetNut residential proxy botnet, a large-scale infrastructure widely exploited for malware command-and-control (C2) operations and password spray attacks. This coordinated effort involved the FBI, Lumen, and various industry pa…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

Sysdig Details JADEPUFFER, the First Documented Agentic Ransomware Operation

A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes flat.

·

Agentic AI, AI Agent, Artificial Intelligence, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Data Breach, JADEPUFFER, LLM, Malware, Ransomware, Security, Sysdig, vulnerability

¶¶¶¶¶

1010.cx

1010.cx

Category: Malware