Beagle: Backdoor Documented by Sophos
Beagle is a backdoor first documented by Sophos, delivered via DonutLoader in a Claude-themed attack by the JadeProx operation. It communicates with…
Tag: backdoor
Trojanized Newtonsoft.Json Fork Targets Digitain Betting Platform in NuGet Typosquat Attack
Cybersecurity researchers at JFrog have uncovered a sophisticated NuGet typosquatting campaign targeting the popular Newtonsoft.Json library. The malicious package, named "Newtonsoftt.Json.Net," is…
Newtonsoftt.Json.Net: Trojanized NuGet Package Targeting Digitain
A trojanized fork of the Newtonsoft.Json library, published as 'Newtonsoftt.Json.Net' on NuGet, designed to rig live game results on the Digitain betting…
FREAKYPOLL: Python Backdoor
FREAKYPOLL is a Python-based backdoor deployed in the UAC-0145 campaign, providing remote access to infected systems.
COWARDDUCK: Android Backdoor Disguised as Security Tool
COWARDDUCK is a full-featured Android backdoor distributed via messaging apps, disguised as security tools. It exfiltrates contacts, files, and geolocation using Dropbox…
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
Cybersecurity researchers at Checkmarx have uncovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of…
New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage
Cybersecurity researchers at Kaspersky have uncovered a previously undocumented malware called GoSerpent, used since late 2025 in cyber attacks targeting government and…
GoSerpent Malware: A Go-Based Backdoor for Espionage
GoSerpent is a previously undocumented Go-based backdoor and remote access trojan (RAT) used in cyber attacks targeting Southeast Asian government and diplomatic…
20+ Hijacked Brazilian Government Websites Used as Malware Delivery Channels in PhantomEnigma Campaign
More than 20 Brazilian government websites were hijacked and turned into malware delivery channels in an active PhantomEnigma campaign uncovered by ANY.RUN,…
PhantomEnigma: Evolving Malware Campaign Abusing Government Infrastructure
PhantomEnigma is an active malware campaign that evolved from a browser-extension banker into a modular Inno/Node.js backdoor. It uses compromised Brazilian government…