SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 60

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Malware Newsletter

The Resurgence of IoT Malware: Inside the Mirai-Based “Gayfemboy” Botnet Campaign

Your Connection, Their Cash: Threat Actors Misuse SDKs to Sell Your Bandwidth 

The Silent, Fileless Threat of VShell      

Android backdoor spies on employees of Russian business 

Malicious Go Module Disguised as SSH Brute Forcer Exfiltrates Credentials via Telegram  

Android Document Readers and Deception: Tracking the Latest Updates to Anatsa  

DragonForce

Hook Version 3: The Banking Trojan with The Most Advanced Capabilities 

SpyNote Malware Part 2      

Tamperedchef – The Bad PDF Editor

AppSuite PDF Editor Backdoor: A Detailed Technical Analysis    

Malware devs abuse Anthropic’s Claude AI to build ransomware 

APT36: Targets Indian BOSS Linux Systems with Weaponized AutoStart Files

Deception in Depth: PRC-Nexus Espionage Campaign Hijacks Web Traffic to Target Diplomats  

Infostealers: The Silent Smash-and-Grab Driving Modern Cybercrime

Ransomware 3.0: Self-Composing and LLM-Orchestrated

DRMD: Deep Reinforcement Learning for Malware Detection under Concept Drift

Real-Time Detection and Recovery Method Against Ransomware Based on Simple Format Analysis

Automated Malware Source Code Generation via Uncensored LLMs and Adversarial Evasion of Censored Model

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, NEWSLETTER)