SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 36

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Cellebrite zero-day exploit used to target phone of Serbian student activist  

One in Four Cyberattacks in 2024 Traced to Infostealers, Huntress Reports  

Uncovering .NET Malware Obfuscated by Encryption and Virtualization  

Black Basta and Cactus Ransomware Groups Add BackConnect Malware to Their Arsenal

Satori Threat Intelligence Disruption: BADBOX 2.0 Targets Consumer Devices with Multiple Fraud Schemes      

Fingerprint Heists: How your browser fingerprint can be stolen and used by fraudsters

Medusa Ransomware Hits 40+ Victims in 2025, Demands $100K–$15M Ransom

Thousands of websites hit by four backdoors in 3rd party JavaScript attack    

Infostealer Campaign against ISPs  

Call It What You Want: Threat Actor Delivers Highly Targeted Multistage Polyglot Malware

New DDoS Botnet Discovered: Over 30,000 Hacked Devices, Majority of Observed Activity Traced to Iran  

The evolution of Dark Caracal tools: analysis of a campaign featuring Poco RAT

Lotus Blossom espionage group targets multiple industries with different versions of Sagerunex and hacking tools 

Malware Detection at the Edge with Lightweight LLMs: A Performance Evaluation

Malware Classification from Memory Dumps Using Machine Learning, Transformers, and Large Language Models

Self-MCKD: Enhancing the Effectiveness and Efficiency of Knowledge Transfer in Malware Classification

Is Malware Detection Needed for Android TV?

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, malware)