Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Threat Intel | One Kit, Forty Companies: How a Malware-as-a-Service Platform Used GitHub as a Distribution Network for its Campaign   Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO   ChainScript: Tracing a Node.js RAT […

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Malware Newsletter

Threat Intel | One Kit, Forty Companies: How a Malware-as-a-Service Platform Used GitHub as a Distribution Network for its Campaign  

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO  

ChainScript: Tracing a Node.js RAT Through the Blockchain  

North Korean “WaterPlum,” commonly referred to as “Contagious Interview,” Cyber Actor Group Targeting IT Professionals; Activities of North Korean IT Workers in Japan, the United States and Europe

npm ‘btree’ Malware Campaign Affects Millions of Downloads, No Need for Install Script  

Malicious npm campaign targets developers integrating Twilio

The Closed Quorum: Inside the first reported autonomous AI C2 implant       

Mind the (Patch) Gap, Part 2: Fake Websites Used to Deploy Chrome & Windows 0-Day Exploits  

RemControl: AI Built the Overlays. Victims Lose their PINs  

Graphalgo campaign spreads to Terraform providers and Go Modules     

Inside Corp MDM, the Android spyware targeting logistics companies     

ClickFix Malware Report  

MacSync under the microscope: new delivery methods and a new payload

CARBONATO:​ ​a​ ​botnet​ ​built​ ​around an AI agent​     

The Psychedelic Stealer: When a CAPTCHA Becomes an Installer  

Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud   

Metamorphic Malware Detection via Graph-Augmented Neural Semantics and Adversarial Hardening: A Comprehensive Framework

HFS-SVE: A Hybrid Feature Selection and Soft Voting Ensemble for Android Malware Detection

A Data-Driven Analysis of Infostealer Malware Victims

Classifier-Dependent Benefits of Pseudo-Labeling for Semi-Supervised Android Malware Attribution

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

Source: SecurityAffairs
Source Link: https://securityaffairs.com/199850/malware/security-affairs-malware-newsletter-round-116.html