New YiBackdoor Allows Attackers to Execute Arbitrary Commands

A new backdoor malware named YiBackdoor has been discovered, enabling attackers to execute arbitrary commands on compromised systems. This sophisticated malware variant is designed to provide threat actors with persistent access and control over infected machines, facilitating a range of malicious activities including data theft, system manipulation, and further network infiltration. YiBackdoor's capabilities highlight the evolving tactics of cybercriminals who leverage advanced backdoor tools to maintain stealth and evade detection by traditional security measures. The malware's command execution feature allows attackers to run any command remotely, making it a versatile tool for cyber espionage and sabotage. Security experts emphasize the importance of timely detection and response to such threats, recommending enhanced monitoring, regular system audits, and updated endpoint protection solutions. Organizations are urged to stay vigilant against emerging backdoor threats like YiBackdoor, which pose significant risks to information security and operational continuity. This article delves into the technical aspects of YiBackdoor, its infection vectors, and mitigation strategies to help cybersecurity professionals bolster their defenses against this new menace.

This Cyber News was published on cybersecuritynews.com. Publication date: Wed, 24 Sep 2025 08:35:17 +0000


Cyber News related to New YiBackdoor Allows Attackers to Execute Arbitrary Commands

New YiBackdoor Allows Attackers to Execute Arbitrary Commands - A new backdoor malware named YiBackdoor has been discovered, enabling attackers to execute arbitrary commands on compromised systems. This sophisticated malware variant is designed to provide threat actors with persistent access and control over ...
2 months ago Cybersecuritynews.com
New Yibackdoor Malware Shares Major Code Overlap With China-linked APT41 - A newly discovered malware named Yibackdoor has been found to share significant code similarities with malware used by the China-linked APT41 threat group. This discovery highlights the evolving tactics of cyber espionage actors and the increasing ...
2 months ago Thehackernews.com APT41
East Texas hospital network can't receive ambulances because of potential cybersecurity incident - GetTime();if(!(u<=a&&d<=l throw new RangeError("Invalid interval");return r.inclusive?u<=l&&d<=a:ut||isNaN(t. Step):1;if(s<1||isNaN(s throw new RangeError("`options. Step):1;if(l<1||isNaN(l throw new RangeError("`options. GetTime()<=n throw new ...
2 years ago Cnn.com
Understanding the New SEC Rules for Disclosing Cybersecurity Incidents - The U.S. Securities and Exchange Commission recently announced its new rules for public companies regarding cybersecurity risk management, strategy, governance, and incident exposure. "Currently, many public companies provide cybersecurity disclosure ...
2 years ago Feeds.dzone.com
New York's cyber chief on keeping cities and states safe from cyberattacks | The Record from Recorded Future News - And so we think that that'll continue to evolve the security posture of New York State in a way that first and foremost provides the public good, which is, if a government service is not secure, it can't be considered reliable. We're ...
8 months ago Therecord.media
New Relic CEO sets observability strategy for the AI age - The executive that replaced Gary Steele as CEO at Proofpoint when Steele left for Splunk has now followed Steele's path from cybersecurity to the helm of an observability company. Ashan Willy was appointed CEO at New Relic in December, a month after ...
1 year ago Techtarget.com
Neurosurgeons of New Jersey Confirms Cyber Attack Resulting in Recent Data Breach - On December 4, 2023, Neurosurgical Associates of New Jersey filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights after discovering. In this notice, Neurosurgeons of New Jersey explains that an ...
2 years ago Jdsupra.com
TISAX: new Catalogue ISA v6 available - ISA 6: The latest version of the ISA catalogue, published in October 2023, with many changes and improvements to address the challenges and needs of the industry. Key changes in ISA 6: New and revised controls to strengthen protection, detection, ...
2 years ago Sorinmustaca.com
Appointments of New Chief Information Security Officers in the United States in January 2023 - Corporate security is undergoing a lot of changes as businesses attempt to keep up with the ever-changing threat landscape. To ensure the safety of both employees and customers, many companies are now hiring a Chief Security Officer or Chief ...
2 years ago Csoonline.com
Cybersixgill introduces new features and capabilities to strengthen threat analysis - Cybersixgill announced new features and capabilities that take security teams' threat detection and mitigation efforts to new levels, helping them identify and mitigate vulnerabilities and detect and stop threats more quickly and effectively. ...
2 years ago Helpnetsecurity.com Hunters
Cybersixgill Announces Identity Intelligence Module for Threat Analysis - PRESS RELEASE. Tel Aviv, Israel - December 6, 2023 - Cybersixgill, the global cyber threat intelligence data provider, announced today new features and capabilities that take security teams' threat detection and mitigation efforts to new levels, ...
2 years ago Darkreading.com Hunters
Year in Malware 2023: Recapping the major cybersecurity stories of the past year - Botnets kept coming back from the dead, ransomware actors found new ways to make money through data theft extortion and threat actors and malware who have been around for more than a decade find ways to stay relevant. After Microsoft blocked macros ...
2 years ago Blog.talosintelligence.com CVE-2023-44487 Lazarus Group Rhysida
Kali Linux 2023.4 released with GNOME 45 and 15 new tools - Kali Linux 2023.4, the fourth and final version of 2023, is now available for download, with fifteen new tools and the GNOME 45 desktop environment. Kali Linux is a Linux distribution created for ethical hackers and cybersecurity professionals to ...
2 years ago Bleepingcomputer.com
Microsoft is bringing the Linux sudo command to Windows Server - Microsoft is bringing the Linux 'sudo' feature to Windows Server 2025, offering a new way for admins to elevate privileges for console applications. Superuser do, or sudo, is a Linux console program that allows low-privileged users to execute a ...
1 year ago Bleepingcomputer.com
New Rhadamanthys stealer version enhances features, evasion - The developers of the Rhadamanthys information-stealing malware have recently released two major versions to add improvements and enhancements across the board, including new stealing capabilities and enhanced evasion. Rhadamanthys is a C++ ...
2 years ago Bleepingcomputer.com
New Relic warns customers it's experienced a cyber incident The Register - Web tracking and analytics outfit New Relic has issued a scanty security advisory warning customers it has experienced a scary cyber something. "We value our New Relic community and want to make our customers aware of a recent cyber security incident ...
2 years ago Theregister.com
How To Protect A New Technology Purchase - Security advice for brand new devices this holiday season. The holiday season often brings the excitement of receiving or gifting the latest tech gadgets, from smartphones to laptops and internet-connected devices. The thrill of starting with a ...
2 years ago Blog.avast.com
Cleafy improves banking security with real-time AI capabilities - In the ever-evolving landscape of banking and financial security, new malware variants poses a significant and imminent challenge. Traditionally, both the identification and classification of these threats only occurred post-attack, leaving banks and ...
2 years ago Helpnetsecurity.com
Microsoft: Iranian hackers target researchers with new MediaPl malware - Microsoft says that a group of Iranian-backed state hackers are targeting high-profile employees of research organizations and universities across Europe and the United States in spearphishing attacks pushing new backdoor malware. The attackers, a ...
1 year ago Bleepingcomputer.com APT3 APT33
Undocumented commands found in Bluetooth chip used by a billion devices - Armed with this new tool, which enables raw access to Bluetooth traffic, Tarlogic discovered hidden vendor-specific commands (Opcode 0x3F) in the ESP32 Bluetooth firmware that allow low-level control over Bluetooth functions. "Tarlogic Security ...
9 months ago Bleepingcomputer.com
New Relic Says Hackers Accessed Internal Environment Using Stolen Credentials - Technology infrastructure monitoring firm New Relic on Friday disclosed a cyber incident that impacted an internal environment. The environment, the company said in an incident notification, hosts information related to how customers are using New ...
2 years ago Packetstormsecurity.com
What Can Go Wrong with Bank Online Account Opening? - Online account opening is one of the most crucial functions for banks today. They pull out their driver's license and show it to the camera on the phone or on the PC. The bank checks some data and vets the driver's license and a new account is ...
2 years ago Securityboulevard.com
INC ransomware source code selling on hacking forums for $300,000 - INC has previously targeted the U.S. division of Xerox Business Solutions, Yamaha Motor Philippines, and, more recently, Scotland's National Health Service. Simultaneously with the alleged sale, the INC Ransom operation is undergoing changes that ...
1 year ago Bleepingcomputer.com LockBit Inc ransom Hunters Black Basta
Android malware Grandoreiro returns after police disruption - In January 2024, an international law enforcement operation involving Brazil, Spain, Interpol, ESET, and Caixa Bank announced the disruption of the malware operation, which had been targeting Spanish-speaking countries since 2017 and caused $120 ...
1 year ago Bleepingcomputer.com
Banking malware Grandoreiro returns after police disruption - In January 2024, an international law enforcement operation involving Brazil, Spain, Interpol, ESET, and Caixa Bank announced the disruption of the malware operation, which had been targeting Spanish-speaking countries since 2017 and caused $120 ...
1 year ago Bleepingcomputer.com