Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion|Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams|Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack|Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback|Australian Police Charge Two Over TeamPCP Credential Theft|Meta to Pay Up to $18B Over Teen Social Media Use|CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do|OpenAI banned Russian ChatGPT accounts backing covert influence operation|CISA Red Team Fully Compromised Two Critical Infrastructure Orgs|FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure|U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog|88 ID Verification Breaches Show the Cost of Collecting Identity Data|WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion|Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams|Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack|

Advertisement

Ad Placeholder

Full Width × 90

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 104

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Hijacked npm Packages Use Novel VSCode Autorun and Blockchain Dead Drops to Deploy a Credential/Crypto Stealer   Building a CI/CD pipeline for Sigma rules   Inside StegoAd: How a Threat Actor Evolved to Fuel Silent Ad […]

July 5, 2026

Security Affairs malware newsletter 2

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Malware Newsletter

Hijacked npm Packages Use Novel VSCode Autorun and Blockchain Dead Drops to Deploy a Credential/Crypto Stealer

Building a CI/CD pipeline for Sigma rules

Inside StegoAd: How a Threat Actor Evolved to Fuel Silent Ad Fraud and Credential Theft at Scale

A Djinn in the Machine: TaskWeaver’s Node.js Intrusion Chain

Chromium extension uses AI‑related branding to redirect browser search

Mustang Panda targets India’s government and energy sectors with ZOHOMURK and MINIRECON

RustDuck: An In-Depth Analysis of a Two-Stage Botnet

From Langflow to Monero: Inside CVE-2026-33017 Cryptominer

The SOC Files: ScreenConnect masked as freeware. An inside look at a large-scale campaign

Veil#Drop: Blogspot-Hosted PowerShell Loader Delivers PureLog Stealer Through XOR-Encoded In-Memory .NET Payloads

Analysis of Ongoing Ousaban Attacks Targeting the Iberian Peninsula

Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack Technique

Popa: From Sourcing to Distribution

From CitrixBleed 2 to Cloudflared: The Tools and Techniques Behind Anubis Ransomware Attacks

ToddyCat: your hidden email assistant. Part 2

PamStealer: a Rust-based macOS infostealer that validates credentials through PAM

Analysis of Ongoing Ousaban Attacks Targeting the Iberian Peninsula

JADEPUFFER: Agentic ransomware for automated database extortion

Don’t Eat The ChocoPoCs! How Vulnerability Researchers Were Repeatedly Targeted By Trojanised Exploits

PolinRider: North Korea-Linked Supply Chain Campaign Expands Across Open Source Ecosystems

Lazarus-Linked npm Malware Masquerades as Rollup Polyfills

Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware

AI-Generated PowerShell Malware: An Experimental Framework and Dataset

A Lightweight Framework for Android Malware Detection via SDAE-Based Multi-View Static Feature Fusion

Addressing Data Scarcity in Malware Classification via Pixel-Level Synthetic Image Generation

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

More Stories>

Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback

Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback

Australian Police Charge Two Over TeamPCP Credential Theft

Australian Police Charge Two Over TeamPCP Credential Theft

Meta to Pay Up to $18B Over Teen Social Media Use

Security>

Hacking>

Malware>