When the Whole Company Adopts AI: What It Does to Your SOC
When the Whole Company Adopts AI: What It Does to Your SOC The Hacker NewsSep 12, 2026AI Agent / Security Operations Over…
Category: Malware
Malware families, payloads, loaders, ransomware and related tooling.
Spark RAT Campaign Targets Cambodia Using Vulnerable OPSWAT Driver to Disable Security Tools
Cybersecurity researchers at Acronis Threat Research Unit (TRU) have uncovered a new campaign targeting individuals and organizations in Cambodia with an open-source…
Spark RAT: Open-Source Go-Based RAT Used in Cambodia Campaign
Spark RAT is an open-source, Go-based cross-platform remote access trojan that enables remote control of compromised devices. It is delivered via a…
GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address
Arctic Wolf has disclosed a previously undocumented Go-based malware framework, GoCaracal, used in a June 2026 intrusion at an unnamed communications organization…
GoCaracal: New Go-Based Malware Framework
GoCaracal is a previously undocumented Go-based malware framework used in a June 2026 intrusion. It provides remote shell access, payload execution, and…
Bandook: Legacy Malware Used Alongside GoCaracal
Bandook is a malware family historically associated with Dark Caracal. In the GoCaracal campaign, Bandook was deployed alongside the lightweight profile of…
QTRouter: Network Obfuscation Platform
QTRouter is a network traffic obfuscation network that uses compromised IoT devices and commercial proxies to hide the origin of malicious activities.
QTBotnet: Botnet Management Platform
QTBotnet is a platform used by QTFY to command and control compromised devices, capable of launching DDoS attacks and executing commands.
QScan: IoT Scanning and Infection Tool
QScan is a tool used by QTFY to scan and automatically infect IoT devices worldwide, adding them to the QTRouter network for…
NovaCookies Phishing Kit Abuses Genuine Docusign Notifications to Steal Microsoft 365 Sessions
Cybersecurity researchers have disclosed a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies, which is used as a proxy to redirect Microsoft 365…