Golden Chickens Resurfaces With Four New Malware Families and Modular Implants
The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families, indicating that the operators are…
Tag: command-and-control
VShell Command-and-Control Listener
A command-and-control listener found running on the attacker's staging server alongside the Hermes agent tooling.
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
Cybersecurity researchers at Checkmarx have uncovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of…
New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands
Cybersecurity researchers have uncovered a new modular malware called TELEPUZ that has been spreading since late April 2026 through websites infected with…
Daxin Rootkit Resurfaces in Taiwan Alongside Novel Stupig Pre-Logon Backdoor
An advanced malware previously attributed to a China-linked threat actor has resurfaced after more than four years within a Taiwan manufacturing firm,…
TuxBot v3 Evolution: LLM-Assisted IoT Botnet Framework Uncovered by Unit 42
Cybersecurity researchers at Palo Alto Networks Unit 42 have disclosed a previously unreported IoT botnet framework named TuxBot v3 Evolution, which shows…
LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts
Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan (RAT) codenamed LabubaRAT that masquerades as NVIDIA software to blend into…
LabubaRAT: A New Rust-Based Remote Access Trojan
LabubaRAT is a previously undocumented Rust-based remote access trojan (RAT) that masquerades as NVIDIA software. It supports multiple communication methods including HTTPS,…
China-Linked UAT-7810 Expands ORB Network With New LONGLEASH Malware
A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand its Operational Relay Box (ORB) network by…
Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks
The Mustang Panda threat group has been observed using Zoho WorkDrive as a command and control channel in attacks targeting Indian government…