malware – CyberSecurityBoard

Malware

ViteVenom: Malicious npm Campaign Targeting Vite Developers

ViteVenom is a malware campaign discovered by Checkmarx that uses seven malicious scoped npm packages to deliver a RAT via blockchain-based C2…

blockchain C2 malware npm RAT

July 17, 2026

Malware

ChainVeil: Precursor Malware Campaign Using Blockchain C2

ChainVeil is a previous malware campaign that used unscoped typosquat npm packages and a four-tier blockchain C2 infrastructure to deliver a remote…

blockchain C2 ChainVeil malware npm

July 17, 2026

Critical CVEs

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft Ravie LakshmananJul 17, 2026Malware / Threat Intelligence Cybersecurity researchers have attributed the…

APT breach exploit malware

July 17, 2026

Attack Groups

Sodinokibi Ransomware Group Overview

Sodinokibi is the malware variant associated with the REvil ransomware group, used in attacks from April 2019 to July 2021. It is…

attack group malware Ransomware REvil

July 17, 2026

Malware

SugarLocker Ransomware Overview

SugarLocker is a ransomware variant developed by the Shtazi-IT dev shop, linked to the sanctioned Aleksandr Ermakov. It was sold with a…

malware Ransomware Shtazi-IT SugarLocker

July 17, 2026

Malware

QuarksDumpLocalHash: Password Hash Extraction Tool

QuarksDumpLocalHash is a tool used to extract local account password hashes from the SAM registry hive. It was deployed in the GoSerpent…

malware password hash QuarksDumpLocalHash

July 17, 2026

Malware

Stowaway: Proxy and Remote Access Tool

Stowaway is a proxy and remote access tool with SOCKS5 proxying, port forwarding, reverse tunneling, remote shell access, file transfer, and SSH-based…

malware proxy RAT Stowaway

July 17, 2026

Malware

TmcLoader: C++ Loader Module

TmcLoader is a C++ loader module that contains an encrypted payload called TmcPayload. It was used in the GoSerpent campaign to exfiltrate…

loader malware TmcLoader

July 17, 2026

Malware

TmcPayload: Data Exfiltration Payload

TmcPayload is an encrypted payload deployed by TmcLoader to exfiltrate stored sensitive data from victim machines. It was part of the evolved…

exfiltration malware TmcPayload

July 17, 2026

Malware

McMx RAT: Lightweight Go-Based Proxy and RAT

McMx RAT is a basic Go-based proxy and remote access tool that is a lightweight version of GoSerpent. It includes capabilities such…

malware McMx RAT proxy RAT

July 17, 2026