An aggressive malware campaign targeting IT professionals in cryptocurrency, Web3, and AI to steal sensitive data and live crypto funds from victim wallets. The attackers pose as recruiters and use trojanized coding tasks to deliver two core malware families, BeaverTail and InvisibleFerret, which have been steadily upgraded with new data theft and wallet-targeting features. The […]

The post Malware Campaign Targets Crypto Users with Fake MetaMask Wallet and Remote Access Backdoor appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new Linux malware sample that strongly aligns with the SysUpdate malware family used by APT27/Iron Tiger. Initially detected on a client’s system, the binary behaved like a system service and executed the GNU/Linux id command when run without specific arguments, returning the output as part of its basic functionality. Closer inspection showed that the sample was […]

The post New SysUpdate Variant Malware Discovered, Decryption Tool for Linux C2 Traffic Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new malware loader, dubbed Foxveil, that abuses trusted platforms such as Cloudflare Pages, Netlify, and Discord to stage and deliver malicious payloads while evading traditional detection methods. Active since at least August 2025, the loader is used as an initial-stage component, establishing a foothold on victim machines, executing shellcode in memory, and preparing the […]

The post Foxveil Malware Loader Uses Cloudflare, Netlify, and Discord to Bypass Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.