SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 38

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Decrypting Encrypted files from Akira Ransomware (Linux/ESXI variant 2024) using a bunch of GPUs 

Jaguar Land Rover Breached by HELLCAT Ransomware Group Using Its Infostealer Playbook—Then a Second Hacker Strikes 

ClearFake’s New Widespread Variant: Increased Web3 Exploitation for Malware Delivery  

Satori Threat Intelligence Disruption: BADBOX 2.0 Targets Consumer Devices with Multiple Fraud Schemes  

StilachiRAT analysis: From system reconnaissance to cryptocurrency theft  

IAS Threat Lab Uncovers Extensive Fraud Scheme Leveraging Fake Android Apps 

UAC-0200: Espionage against the defense-industrial complex using DarkCrystal RAT (CERT-UA#14045)  

Technical Advisory: Mass Exploitation of CVE-2024-4577

Arcane stealer: We want all your data  

Shedding light on the ABYSSWORKER driver 

RansomHub: Attackers Leverage New Custom Backdoor 

Head Mare and Twelve join forces to attack Russian entities

Steam pulls game demo infecting Windows with info-stealing malware

Trust Under Siege: Label Spoofing Attacks against Machine Learning for Android Malware Detection

Enhancing Malware Fingerprinting through Analysis of Evasive Techniques

A Wide and Weighted Deep Ensemble Model for Behavioral Drifting Ransomware Attacks

Trandroid: An Android Mobile Threat Detection System Using Transformer Neural Networks 

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, malware)