Thought Virus: Subliminal AI Propagation
Thought Virus is a subliminal variant of AI self-replication documented by Weckbecker et al. in February 2026, related to the mind virus…
Category: Malware
Malware families, payloads, loaders, ransomware and related tooling.
Prompt Infection: Retrieval-Based Self-Replication
Prompt Infection is a technique described by Lee and Tiwari in 2024, involving retrieval-based self-replication in AI systems, a precursor to mind…
16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets
Cybersecurity researchers have uncovered a typosquatting campaign targeting RubyGems users with a Windows-based information stealer. The campaign, tracked as StubMaker by OpenSourceMalware,…
StubMaker: Typosquatted RubyGems Campaign
StubMaker is a typosquatting campaign targeting RubyGems users with a Windows-based information stealer. It uses malicious gems with extconf.rb hooks to deliver…
wincfg: Go-Based Stealer Payload
wincfg is a Go-based stealer payload used in the StubMaker campaign. It extracts credentials from Chromium-based browsers, collects cryptocurrency wallets and seed…
abe_payload.dll: DLL Payload for Credential Theft
abe_payload.dll is a DLL payload used by the StubMaker stealer to extract credentials from Chromium-based browsers by circumventing app-bound encryption (ABE) protections.
ShadowRay 2.0: Cryptocurrency Mining Botnet Targeting Ray Clusters
ShadowRay 2.0 is a campaign that exploits unpatched Ray instances to turn clusters with NVIDIA GPUs into a self-replicating cryptocurrency mining botnet.…
Cavern C2 Framework Evolves with DNS and Google Apps Script to Evade Detection
Cybersecurity researchers have uncovered new components in the Cavern (aka Cav3rn) command-and-control (C2) framework, used by Iranian nation-state hackers in attacks targeting…
TAMECAT: APT42’s Modular Surveillance Framework
TAMECAT is a modular surveillance and collection framework used by APT42 in spear-phishing attacks targeting the nuclear energy sector. It supports enumeration,…
OilBooster — Malware profile
OilBooster was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…