SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 61

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Malware Newsletter

Operation HanKook Phantom: North Korean APT37 targeting South Korea

Three Lazarus RATs coming for your cheese  

Malvertising Campaign on Meta Expands to Android, Pushing Advanced Crypto-Stealing Malware to Users Worldwide 

Android Droppers: The Silent Gatekeepers of Malware 

MystRodX: The Covert Dual-Mode Backdoor Threat 

Ethereum smart contracts used to push malicious code on npm  

Analyzing NotDoor: Inside APT28’s Expanding Arsenal  

RapperBot: From Infection to DDoS in a Split Second 

Analysis of APT-C-53 (Gamaredon) attacks against Ukrainian government departments

Cybercriminals Exploit X’s Grok AI to Bypass Ad Protections and Spread Malware to Millions

Uncovering a Colombian Malware Campaign with AI Code Analysis

An MDR Analysis of the AMOS Stealer Campaign Targeting macOS via ‘Cracked’ Apps 

Evaluating Diverse Feature Extraction Techniques of Multifaceted IoT Malware Analysis: A Survey

BIDO: A Unified Approach to Address Obfuscation and Concept Drift Challenges in Image-based Malware Detection

Modeling of Malware Propagation in Wireless Mobile Networks with Hotspots Considering the Movement of Mobile Clients Based on Cosine Similarity

Real-Time Detection and Recovery Method Against Ransomware Based on Simple Format Analysis

s1ngularity’s Aftermath: AI, TTPs, and Impact in the Nx Supply Chain Attack  

Cybercriminals Exploit X’s Grok AI to Bypass Ad Protections and Spread Malware to MillionsMalicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)