Fosstodon

Pyrzout :vm:Koske, a new AI-Generated Linux malware appears in the threat landscape – Source: securityaffairs.com <a href="https://ciso2ciso.com/koske-a-new-ai-generated-linux-malware-appears-in-the-threat-landscape-source-securityaffairs-com/" rel="nofollow noopener" translate="no" target="_blank">https://ciso2ciso.com/koske-a-new-ai-generated-linux-malware-appears-in-the-threat-landscape-source-securityaffairs-com/</a> <a href="https://social.skynetcloud.site/tags/rssfeedpostgeneratorecho" class="mention hashtag" rel="nofollow noopener" target="_blank">#rssfeedpostgeneratorecho</a> <a href="https://social.skynetcloud.site/tags/informationsecuritynews" class="mention hashtag" rel="nofollow noopener" target="_blank">#informationsecuritynews</a> <a href="https://social.skynetcloud.site/tags/ITInformationSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITInformationSecurity</a> <a href="https://social.skynetcloud.site/tags/SecurityAffairscom" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityAffairscom</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/PierluigiPaganini" class="mention hashtag" rel="nofollow noopener" target="_blank">#PierluigiPaganini</a> <a href="https://social.skynetcloud.site/tags/SecurityAffairs" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityAffairs</a> <a href="https://social.skynetcloud.site/tags/SecurityAffairs" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityAffairs</a> <a href="https://social.skynetcloud.site/tags/BreakingNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#BreakingNews</a> <a href="https://social.skynetcloud.site/tags/Koskemalware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Koskemalware</a> <a href="https://social.skynetcloud.site/tags/SecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityNews</a> <a href="https://social.skynetcloud.site/tags/hackingnews" class="mention hashtag" rel="nofollow noopener" target="_blank">#hackingnews</a> <a href="https://social.skynetcloud.site/tags/CyberCrime" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberCrime</a> <a href="https://social.skynetcloud.site/tags/Cybercrime" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybercrime</a> <a href="https://social.skynetcloud.site/tags/hacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#hacking</a> <a href="https://social.skynetcloud.site/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://social.skynetcloud.site/tags/LINUX" class="mention hashtag" rel="nofollow noopener" target="_blank">#LINUX</a>

Pyrzout :vm:Operation CargoTalon targets Russia’s aerospace with EAGLET malware, – Source: securityaffairs.com <a href="https://ciso2ciso.com/operation-cargotalon-targets-russias-aerospace-with-eaglet-malware-source-securityaffairs-com/" rel="nofollow noopener" translate="no" target="_blank">https://ciso2ciso.com/operation-cargotalon-targets-russias-aerospace-with-eaglet-malware-source-securityaffairs-com/</a> <a href="https://social.skynetcloud.site/tags/rssfeedpostgeneratorecho" class="mention hashtag" rel="nofollow noopener" target="_blank">#rssfeedpostgeneratorecho</a> <a href="https://social.skynetcloud.site/tags/informationsecuritynews" class="mention hashtag" rel="nofollow noopener" target="_blank">#informationsecuritynews</a> <a href="https://social.skynetcloud.site/tags/ITInformationSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITInformationSecurity</a> <a href="https://social.skynetcloud.site/tags/OperationCargoTalon" class="mention hashtag" rel="nofollow noopener" target="_blank">#OperationCargoTalon</a> <a href="https://social.skynetcloud.site/tags/SecurityAffairscom" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityAffairscom</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/PierluigiPaganini" class="mention hashtag" rel="nofollow noopener" target="_blank">#PierluigiPaganini</a> <a href="https://social.skynetcloud.site/tags/SecurityAffairs" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityAffairs</a> <a href="https://social.skynetcloud.site/tags/SecurityAffairs" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityAffairs</a> <a href="https://social.skynetcloud.site/tags/EAGLETmalware" class="mention hashtag" rel="nofollow noopener" target="_blank">#EAGLETmalware</a> <a href="https://social.skynetcloud.site/tags/BreakingNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#BreakingNews</a> <a href="https://social.skynetcloud.site/tags/Intelligence" class="mention hashtag" rel="nofollow noopener" target="_blank">#Intelligence</a> <a href="https://social.skynetcloud.site/tags/SecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityNews</a> <a href="https://social.skynetcloud.site/tags/hackingnews" class="mention hashtag" rel="nofollow noopener" target="_blank">#hackingnews</a> <a href="https://social.skynetcloud.site/tags/hacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#hacking</a> <a href="https://social.skynetcloud.site/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://social.skynetcloud.site/tags/Russia" class="mention hashtag" rel="nofollow noopener" target="_blank">#Russia</a>

The New Oil<a href="https://mastodon.thenewoil.org/tags/Coyote" class="mention hashtag" rel="nofollow noopener" target="_blank">#Coyote</a> <a href="https://mastodon.thenewoil.org/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a> abuses <a href="https://mastodon.thenewoil.org/tags/Windows" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows</a> accessibility framework for data theft<a href="https://www.bleepingcomputer.com/news/security/coyote-malware-abuses-windows-accessibility-framework-for-data-theft/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/coyote-malware-abuses-windows-accessibility-framework-for-data-theft/</a><a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a>

securityaffairsOperation <a href="https://infosec.exchange/tags/CargoTalon" class="mention hashtag" rel="nofollow noopener" target="_blank">#CargoTalon</a> targets <a href="https://infosec.exchange/tags/Russia" class="mention hashtag" rel="nofollow noopener" target="_blank">#Russia</a>’s aerospace with <a href="https://infosec.exchange/tags/EAGLET" class="mention hashtag" rel="nofollow noopener" target="_blank">#EAGLET</a> <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a>, <a href="https://securityaffairs.com/180378/intelligence/operation-cargotalon-targets-russias-aerospace-with-eaglet-malware.html" rel="nofollow noopener" translate="no" target="_blank">https://securityaffairs.com/180378/intelligence/operation-cargotalon-targets-russias-aerospace-with-eaglet-malware.html</a> <a href="https://infosec.exchange/tags/securityaffairs" class="mention hashtag" rel="nofollow noopener" target="_blank">#securityaffairs</a> <a href="https://infosec.exchange/tags/hacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#hacking</a>

🤖 Bip-bop the Bot 🇷🇺📝 Daily report 📈Here are today's most popular trending hashtags #⃣ on our website 🌐️:<a href="https://mstdn.forfun.su/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a>, <a href="https://mstdn.forfun.su/tags/art" class="mention hashtag" rel="nofollow noopener" target="_blank">#art</a>, <a href="https://mstdn.forfun.su/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a>, <a href="https://mstdn.forfun.su/tags/homelab" class="mention hashtag" rel="nofollow noopener" target="_blank">#homelab</a>, <a href="https://mstdn.forfun.su/tags/debian" class="mention hashtag" rel="nofollow noopener" target="_blank">#debian</a>, <a href="https://mstdn.forfun.su/tags/genai" class="mention hashtag" rel="nofollow noopener" target="_blank">#genai</a>, <a href="https://mstdn.forfun.su/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensource</a>, <a href="https://mstdn.forfun.su/tags/foss" class="mention hashtag" rel="nofollow noopener" target="_blank">#foss</a>, <a href="https://mstdn.forfun.su/tags/generativeai" class="mention hashtag" rel="nofollow noopener" target="_blank">#generativeai</a>, <a href="https://mstdn.forfun.su/tags/selfhosted" class="mention hashtag" rel="nofollow noopener" target="_blank">#selfhosted</a>, <a href="https://mstdn.forfun.su/tags/ai" class="mention hashtag" rel="nofollow noopener" target="_blank">#ai</a>, <a href="https://mstdn.forfun.su/tags/aiart" class="mention hashtag" rel="nofollow noopener" target="_blank">#aiart</a>🔥 Stay tuned! 🔥

Pyrzout :vm:Beware of Fake Error Pages Deploying Platform-Specific Malware on Linux and Windows Systems <a href="https://gbhackers.com/beware-of-fake-error-pages-deploying-platform-specific-malware/" rel="nofollow noopener" translate="no" target="_blank">https://gbhackers.com/beware-of-fake-error-pages-deploying-platform-specific-malware/</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://social.skynetcloud.site/tags/Windows" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows</a> <a href="https://social.skynetcloud.site/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a>

AAKLSales pitch toward the end. Unit42: Malware: Muddled Libra Threat Assessment: Further-Reaching, Faster, More Impactful <a href="https://unit42.paloaltonetworks.com/muddled-libra/" rel="nofollow noopener" translate="no" target="_blank">https://unit42.paloaltonetworks.com/muddled-libra/</a> <a href="https://beta.mstdn.cf/users/unit42_intel" class="u-url mention" rel="nofollow noopener" target="_blank">@unit42_intel</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a>

Michael Gisiger :mastodon:„Sicherheitsforscher von Aqua Security haben eine neue <a href="https://nerdculture.de/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> namens Koske entdeckt, die auf <a href="https://nerdculture.de/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a> Systeme abzielt und durch Bilder eingeschleust wird – unter anderem von Pandabären. Wie die Forscher in einem Blogbeitrag schilderten, fanden sie Hinweise darauf, dass die Schadsoftware unter Einsatz einer <a href="https://nerdculture.de/tags/KI" class="mention hashtag" rel="nofollow noopener" target="_blank">#KI</a> entwickelt wurde.“<a href="https://www.golem.de/news/mit-ki-entwickelt-neue-linux-malware-versteckt-sich-in-suessen-panda-bildchen-2507-198500.html" rel="nofollow noopener" translate="no" target="_blank">https://www.golem.de/news/mit-ki-entwickelt-neue-linux-malware-versteckt-sich-in-suessen-panda-bildchen-2507-198500.html</a>

limit--This panda diplomacy thing is crazy <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/crypto" class="mention hashtag" rel="nofollow noopener" target="_blank">#crypto</a> <a href="https://infosec.exchange/tags/redteam" class="mention hashtag" rel="nofollow noopener" target="_blank">#redteam</a> <a href="https://www.bleepingcomputer.com/news/security/new-koske-linux-malware-hides-in-cute-panda-images/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/new-koske-linux-malware-hides-in-cute-panda-images/</a>

Eduardo Medina 🇪🇸No viene mal resubir este pedazo de mi pasado a una plataforma que no esté atada a un multinacional:<a href="https://mastodon.social/tags/Windows11" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows11</a> es un <a href="https://mastodon.social/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a>. ¡Pásate a <a href="https://mastodon.social/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a>! <a href="https://video.hardlimit.com/w/bLebUbnKcK45hsE2dPR3Wp" rel="nofollow noopener" translate="no" target="_blank">https://video.hardlimit.com/w/bLebUbnKcK45hsE2dPR3Wp</a><a href="https://mastodon.social/tags/Windows" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows</a> <a href="https://mastodon.social/tags/Microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microsoft</a>

Eduardo Medina 🇪🇸Desde que <a href="https://mastodon.social/tags/Recall" class="mention hashtag" rel="nofollow noopener" target="_blank">#Recall</a> / <a href="https://mastodon.social/tags/Recuerdos" class="mention hashtag" rel="nofollow noopener" target="_blank">#Recuerdos</a> fue anunciado, considero que <a href="https://mastodon.social/tags/Windows11" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows11</a> es un <a href="https://mastodon.social/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a> que, en caso de necesitarlo, lo suyo sería ejecutarlo en una máquina virtual. <a href="https://www.muycomputer.com/2025/07/25/adguard-tambien-se-suma-a-bloquear-recall/" rel="nofollow noopener" translate="no" target="_blank">https://www.muycomputer.com/2025/07/25/adguard-tambien-se-suma-a-bloquear-recall/</a><a href="https://mastodon.social/tags/Windows" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows</a> <a href="https://mastodon.social/tags/Microsoft" class="mention hashtag" rel="nofollow noopener" target="_blank">#Microsoft</a>

CybernewsFake banking apps can empty your bank account, hijack calls and SMS, and spy on your phone.<a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a> <a href="https://infosec.exchange/tags/bank" class="mention hashtag" rel="nofollow noopener" target="_blank">#bank</a> <a href="https://infosec.exchange/tags/Android" class="mention hashtag" rel="nofollow noopener" target="_blank">#Android</a> <a href="https://infosec.exchange/tags/app" class="mention hashtag" rel="nofollow noopener" target="_blank">#app</a> <a href="https://infosec.exchange/tags/SMS" class="mention hashtag" rel="nofollow noopener" target="_blank">#SMS</a> <a href="https://cnews.link/android-bank-app-malware-india-2/" rel="nofollow noopener" translate="no" target="_blank">https://cnews.link/android-bank-app-malware-india-2/</a>

Pyrzout :vm:AI-forged panda images hide persistent cryptomining malware ‘Koske’ <a href="https://www.csoonline.com/article/4028933/ai-forged-panda-images-hide-persistent-cryptomining-malware-koske.html" rel="nofollow noopener" translate="no" target="_blank">https://www.csoonline.com/article/4028933/ai-forged-panda-images-hide-persistent-cryptomining-malware-koske.html</a> <a href="https://social.skynetcloud.site/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://social.skynetcloud.site/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a>

Verfassungklage@troet.cafeMit <a href="https://troet.cafe/tags/KI" class="mention hashtag" rel="nofollow noopener" target="_blank">#KI</a> entwickelt: Neue <a href="https://troet.cafe/tags/Linux_Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux_Malware</a> versteckt sich in süßen <a href="https://troet.cafe/tags/Panda_Bildchen" class="mention hashtag" rel="nofollow noopener" target="_blank">#Panda_Bildchen</a><a href="https://troet.cafe/tags/JPEG" class="mention hashtag" rel="nofollow noopener" target="_blank">#JPEG</a>-Dateien können nicht nur schöne Bilder enthalten, sondern manchmal auch gefährlichen <a href="https://troet.cafe/tags/Schadcode" class="mention hashtag" rel="nofollow noopener" target="_blank">#Schadcode</a>. Eine neue <a href="https://troet.cafe/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linux</a>- <a href="https://troet.cafe/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> macht davon Gebrauch.<a href="https://troet.cafe/tags/Sicherheitsforscher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sicherheitsforscher</a> von <a href="https://troet.cafe/tags/Aqua_Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Aqua_Security</a> haben eine neue <a href="https://troet.cafe/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> namens Koske entdeckt, die auf <a href="https://troet.cafe/tags/LinuxSysteme" class="mention hashtag" rel="nofollow noopener" target="_blank">#LinuxSysteme</a> abzielt und durch Bilder eingeschleust wird – unter anderem von <a href="https://troet.cafe/tags/Pandab%C3%A4ren" class="mention hashtag" rel="nofollow noopener" target="_blank">#Pandabären</a>. <a href="https://www.golem.de/news/mit-ki-entwickelt-neue-linux-malware-versteckt-sich-in-suessen-panda-bildchen-2507-198500.html" rel="nofollow noopener" translate="no" target="_blank">https://www.golem.de/news/mit-ki-entwickelt-neue-linux-malware-versteckt-sich-in-suessen-panda-bildchen-2507-198500.html</a>

Verfassungklage@troet.cafe<a href="https://troet.cafe/tags/Datendiebstahl" class="mention hashtag" rel="nofollow noopener" target="_blank">#Datendiebstahl</a>: Neue <a href="https://troet.cafe/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> lässt <a href="https://troet.cafe/tags/KI" class="mention hashtag" rel="nofollow noopener" target="_blank">#KI</a> zur Laufzeit <a href="https://troet.cafe/tags/Befehle" class="mention hashtag" rel="nofollow noopener" target="_blank">#Befehle</a> erzeugenEine <a href="https://troet.cafe/tags/Windows" class="mention hashtag" rel="nofollow noopener" target="_blank">#Windows</a>- <a href="https://troet.cafe/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> namens <a href="https://troet.cafe/tags/Lamehug" class="mention hashtag" rel="nofollow noopener" target="_blank">#Lamehug</a> sorgt für Aufsehen. Befehle zum Ausleiten von Daten werden zur Laufzeit von einer KI generiert.<a href="https://troet.cafe/tags/Sicherheitsforscher" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sicherheitsforscher</a> haben eine neuartige <a href="https://troet.cafe/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> entdeckt, die sich eines großen <a href="https://troet.cafe/tags/Sprachmodells" class="mention hashtag" rel="nofollow noopener" target="_blank">#Sprachmodells</a> bedient, um zur Laufzeit Befehle zu generieren und zur Ausführung zu bringen. <a href="https://www.golem.de/news/datendiebstahl-neue-malware-laesst-ki-zur-laufzeit-befehle-erzeugen-2507-198517.html" rel="nofollow noopener" translate="no" target="_blank">https://www.golem.de/news/datendiebstahl-neue-malware-laesst-ki-zur-laufzeit-befehle-erzeugen-2507-198517.html</a>

OTX BotThreat Actors Lure Victims Into Downloading .HTA Files Using ClickFix To Spread Epsilon Red RansomwareA new Epsilon Red ransomware campaign has been discovered targeting users globally through fake ClickFix verification pages. Active since July 2025, the threat actors employ social engineering tactics and impersonate popular platforms like Discord, Twitch, and OnlyFans to trick users into executing malicious .HTA files via ActiveX. This method leads to silent payload downloads and ransomware deployment. The campaign uses a Clickfix-themed malware delivery site, urging victims to visit a secondary page where malicious shell commands are executed. The attackers also impersonate various streaming services and use romance-themed lures. Epsilon Red, first observed in 2021, shows some similarities to REvil ransomware in its ransom note styling but appears distinct in its tactics and infrastructure.Pulse ID: 68835c6e2b2796aec0bd0a60 Pulse Link: <a href="https://otx.alienvault.com/pulse/68835c6e2b2796aec0bd0a60" rel="nofollow noopener" translate="no" target="_blank">https://otx.alienvault.com/pulse/68835c6e2b2796aec0bd0a60</a> Pulse Author: AlienVault Created: 2025-07-25 10:29:02Be advised, this data is unverified and should be considered preliminary. Always do further verification.<a href="https://social.raytec.co/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://social.raytec.co/tags/Discord" class="mention hashtag" rel="nofollow noopener" target="_blank">#Discord</a> <a href="https://social.raytec.co/tags/ICS" class="mention hashtag" rel="nofollow noopener" target="_blank">#ICS</a> <a href="https://social.raytec.co/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://social.raytec.co/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://social.raytec.co/tags/OTX" class="mention hashtag" rel="nofollow noopener" target="_blank">#OTX</a> <a href="https://social.raytec.co/tags/OpenThreatExchange" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenThreatExchange</a> <a href="https://social.raytec.co/tags/REvil" class="mention hashtag" rel="nofollow noopener" target="_blank">#REvil</a> <a href="https://social.raytec.co/tags/RansomWare" class="mention hashtag" rel="nofollow noopener" target="_blank">#RansomWare</a> <a href="https://social.raytec.co/tags/SocialEngineering" class="mention hashtag" rel="nofollow noopener" target="_blank">#SocialEngineering</a> <a href="https://social.raytec.co/tags/bot" class="mention hashtag" rel="nofollow noopener" target="_blank">#bot</a> <a href="https://social.raytec.co/tags/AlienVault" class="mention hashtag" rel="nofollow noopener" target="_blank">#AlienVault</a>

OTX BotAndroid Malware Posing As Indian Bank AppsThis report analyzes a sophisticated Android malware targeting Indian banking apps. The malware uses a dropper and main payload structure, leveraging permissions like SMS access and silent installation to steal credentials, intercept messages, and perform unauthorized financial activities. It employs Firebase for command and control, phishing pages to mimic banking interfaces, and techniques like call forwarding abuse. The malware's modular architecture, evasion tactics, and persistence mechanisms pose significant threats to mobile banking security. Distribution methods include smishing, fake websites, and malvertising. The report provides detailed static and dynamic analysis, highlighting the malware's capabilities in data exfiltration, debit card harvesting, and remote command execution.Pulse ID: 68835c6fda683e2a665d5722 Pulse Link: <a href="https://otx.alienvault.com/pulse/68835c6fda683e2a665d5722" rel="nofollow noopener" translate="no" target="_blank">https://otx.alienvault.com/pulse/68835c6fda683e2a665d5722</a> Pulse Author: AlienVault Created: 2025-07-25 10:29:03Be advised, this data is unverified and should be considered preliminary. Always do further verification.<a href="https://social.raytec.co/tags/Android" class="mention hashtag" rel="nofollow noopener" target="_blank">#Android</a> <a href="https://social.raytec.co/tags/Bank" class="mention hashtag" rel="nofollow noopener" target="_blank">#Bank</a> <a href="https://social.raytec.co/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://social.raytec.co/tags/ICS" class="mention hashtag" rel="nofollow noopener" target="_blank">#ICS</a> <a href="https://social.raytec.co/tags/India" class="mention hashtag" rel="nofollow noopener" target="_blank">#India</a> <a href="https://social.raytec.co/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://social.raytec.co/tags/Malvertising" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malvertising</a> <a href="https://social.raytec.co/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://social.raytec.co/tags/Mimic" class="mention hashtag" rel="nofollow noopener" target="_blank">#Mimic</a> <a href="https://social.raytec.co/tags/MobileBanking" class="mention hashtag" rel="nofollow noopener" target="_blank">#MobileBanking</a> <a href="https://social.raytec.co/tags/OTX" class="mention hashtag" rel="nofollow noopener" target="_blank">#OTX</a> <a href="https://social.raytec.co/tags/OpenThreatExchange" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenThreatExchange</a> <a href="https://social.raytec.co/tags/Phishing" class="mention hashtag" rel="nofollow noopener" target="_blank">#Phishing</a> <a href="https://social.raytec.co/tags/RAT" class="mention hashtag" rel="nofollow noopener" target="_blank">#RAT</a> <a href="https://social.raytec.co/tags/RCE" class="mention hashtag" rel="nofollow noopener" target="_blank">#RCE</a> <a href="https://social.raytec.co/tags/RemoteCommandExecution" class="mention hashtag" rel="nofollow noopener" target="_blank">#RemoteCommandExecution</a> <a href="https://social.raytec.co/tags/SMS" class="mention hashtag" rel="nofollow noopener" target="_blank">#SMS</a> <a href="https://social.raytec.co/tags/Smishing" class="mention hashtag" rel="nofollow noopener" target="_blank">#Smishing</a> <a href="https://social.raytec.co/tags/bot" class="mention hashtag" rel="nofollow noopener" target="_blank">#bot</a> <a href="https://social.raytec.co/tags/AlienVault" class="mention hashtag" rel="nofollow noopener" target="_blank">#AlienVault</a>

Joaquim HomrighausenWow ... what a surprise. Or wait, no, it isn't 🤔😑<a href="https://www.tomshardware.com/tech-industry/cyber-security/hacker-injects-malicious-potentially-disk-wiping-prompt-into-amazons-ai-coding-assistant-with-a-simple-pull-request-told-your-goal-is-to-clean-a-system-to-a-near-factory-state-and-delete-file-system-and-cloud-resources" rel="nofollow noopener" translate="no" target="_blank">https://www.tomshardware.com/tech-industry/cyber-security/hacker-injects-malicious-potentially-disk-wiping-prompt-into-amazons-ai-coding-assistant-with-a-simple-pull-request-told-your-goal-is-to-clean-a-system-to-a-near-factory-state-and-delete-file-system-and-cloud-resources</a><a href="https://mastodon.online/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://mastodon.online/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> <a href="https://mastodon.online/tags/vibecoding" class="mention hashtag" rel="nofollow noopener" target="_blank">#vibecoding</a> <a href="https://mastodon.online/tags/LLM" class="mention hashtag" rel="nofollow noopener" target="_blank">#LLM</a> <a href="https://mastodon.online/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a> <a href="https://mastodon.online/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a> <a href="https://mastodon.online/tags/amazon" class="mention hashtag" rel="nofollow noopener" target="_blank">#amazon</a> <a href="https://mastodon.online/tags/coding" class="mention hashtag" rel="nofollow noopener" target="_blank">#coding</a> <a href="https://mastodon.online/tags/codingassistant" class="mention hashtag" rel="nofollow noopener" target="_blank">#codingassistant</a> <a href="https://mastodon.online/tags/cybersec" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersec</a> <a href="https://mastodon.online/tags/devops" class="mention hashtag" rel="nofollow noopener" target="_blank">#devops</a> <a href="https://mastodon.online/tags/programming" class="mention hashtag" rel="nofollow noopener" target="_blank">#programming</a> <a href="https://mastodon.online/tags/developers" class="mention hashtag" rel="nofollow noopener" target="_blank">#developers</a>

Pyrzout :vm:Sophisticated Koske Linux Malware Developed With AI Aid <a href="https://www.securityweek.com/sophisticated-koske-linux-malware-developed-with-ai-aid/" rel="nofollow noopener" translate="no" target="_blank">https://www.securityweek.com/sophisticated-koske-linux-malware-developed-with-ai-aid/</a> <a href="https://social.skynetcloud.site/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a>&Threats <a href="https://social.skynetcloud.site/tags/Linuxmalware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linuxmalware</a> <a href="https://social.skynetcloud.site/tags/Koske" class="mention hashtag" rel="nofollow noopener" target="_blank">#Koske</a> <a href="https://social.skynetcloud.site/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a>

Recent searches

Search options

Administered by:

Server stats:

#malware

Recent searches

Search options

Administered by:

Server stats:

MALWARE

#malware