Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Gray Rabbits and the Tale of a One-Click Backdoor   Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkit Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot […

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Malware Newsletter

Gray Rabbits and the Tale of a One-Click Backdoor  

Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkit

Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service  

Mind the (Patch) Gap: Multiple Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows  

The banana stand: brokering and managing infections across Asia using MQTT 

Iranian cyber targeting of dissidents, activists and journalists

SilkParasite Infrastructure: SpiceRAT Servers Tied to Energy and Government Targets Across Central Asia

Beware the SparroWock: The backdoor that bites, the commands that catch

Brevo supply chain attack hits 100k+ sites with WordPress backdoors and Clickfix malware 

Skill Poisioning turning AI agents into malware droppers – warns China’s National CERT  

RatHat: AI-Powered Mobile Threat is Here for Your Credentials & Bank Accounts  

Brevo supply chain attack hits 100k+ sites with WordPress backdoors and Clickfix malware 

The extension you never installed: KREMLIN forges Chrome’s own integrity checks to steal banking sessions 

Delphi Scanner: efficient and interpretable static malware detection via API sequence modeling

ALIBI: Adversarial Legitimacy Injection in Binary Input against LLM Malware Analyzers

Metamorphic Malware Detection via Graph-Augmented Neural Semantics and Adversarial Hardening: A Comprehensive Framework

Uncertainty-Aware Zero-Day Botnet Detection for IoT Networks with Real-World Edge Deployment on Resource-Constrained Hardware

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)

Source: SecurityAffairs
Source Link: https://securityaffairs.com/199409/malware/security-affairs-malware-newsletter-round-115.html