SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 83

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Malware Newsletter

ClawHavoc: 341 Malicious Clawed Skills Found by the Bot They Were Targeting   ù

APT28 Leverages CVE-2026-21509 in Operation Neusploit

Amaranth-Dragon: Weaponizing CVE-2025-8088 for Targeted Espionage in the Southeast Asia  

Analyzing Dead#Vax: Analyzing Multi-Stage VHD Delivery and Self-Parsing Batch Scripts to Deploy In-Memory Shellcode 

The Shadow Campaigns: Uncovering Global Espionage

Knife Cutting the Edge: Disclosing a China-nexus gateway-monitoring AitM framework 

Malicious dYdX Packages Published to npm and PyPI After Maintainer Compromise  

Malicious use of virtual machine infrastructure  

Detecting and Explaining Malware Family Evolution Using Rule-Based Drift Analysis

Malware Detection Through Memory Analysis

DIGITRACKER: An Efficient Tool Leveraging Loki for Detecting, Mitigating Cyber Threats and Empowering Cyber Defense

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – malware, newsletter)