A newly analyzed ransomware campaign dubbed “JanaWare” is targeting users in Turkey by leveraging a customized version of the Adwind Remote Access Trojan (RAT). The campaign combines stealthy delivery techniques, geographic restrictions, and polymorphic malware to evade detection while maintaining long-term activity. Researchers identified that JanaWare is specifically designed to infect systems located in Turkey. […]

The post JanaWare Ransomware Hits Turkish Users via Tailored Adwind RAT appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Attackers are increasingly abusing QEMU virtual machines to hide credential theft and ransomware staging inside “invisible” virtual environments, making detection and forensics significantly harder for defenders. QEMU is a legitimate open-source emulator and virtualizer that allows running full operating systems as virtual machines on a host. Threat actors are weaponizing this capability by running their […]

The post QEMU Hijacked as Stealth Backdoor for Credential Theft, Ransomware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.