Solar — Malware profile
Solar was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Category: Malware
Malware families, payloads, loaders, ransomware and related tooling.
Veaty — Malware profile
Veaty was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Cybersecurity researchers have uncovered a previously undocumented Linux botnet family named Evooo1Bot, which is derived from the Mirai botnet source code and…
Evooo1Bot: A New Mirai-Based Linux Botnet
Evooo1Bot is a Linux botnet family derived from the Mirai source code, active since July 2026. It exploits known vulnerabilities to compromise…
Babuk Ransomware Deployed in vCenter Attacks
In at least one case, the vCenter exploitation campaign led to the deployment of Babuk-derived ransomware, compromising 361 victim IPs across 47…
linuxFile Backdoor Used in VMware vCenter Exploitation
linuxFile (aka systemlog or linux_x86) is a backdoor deployed via cron on compromised VMware vCenter systems. It connects to a WebSocket endpoint…
Auto-Color: Backdoor Deployed via SAP NetWeaver Exploit
Auto-Color is a backdoor that was deployed in an attack against a U.S.-based chemicals company in April 2025, exploiting the critical SAP…
NanoCore: Remote Access Trojan Used by Sable Squirrel
NanoCore is a remote access trojan that has been identified in malware samples communicating with Sable Squirrel's infrastructure, highlighting its role in…
njRAT: Malware Family Found in Sable Squirrel Infrastructure
njRAT is a remote access trojan that has been detected in malware samples communicating with Sable Squirrel's infrastructure, contributing to the threat…
HiddenTear: Ransomware Signatures Found in Sable Squirrel Campaigns
HiddenTear is a ransomware family whose signatures have been found in artifacts communicating with Sable Squirrel's infrastructure, indicating potential ransomware activity within…