SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 100

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Malware Newsletter

Malware Targeting WordPress Abuses Steam Community Profiles for Command & Control Operations  

Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokens  

Operation Dragon Weave : Uncovering a China-Linked Campaign Targeting Czech Republic and Taiwan Using Azure Cloud C2

Operation XENOFISCAL: SideCopy deploying persistent XenoRAT targeting the MoF, Afghanistan 

Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages  

Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor

FSB’s matryoshka #1/3 – Gamaredon’s gifts that keeps unpacking – GammaPhish and GammaWorm  

UAC-0184: From HTA to a Signed Network Stack

PCPJack Hijacked 230 AWS, GCP, and Azure Servers to Run a Hidden SMTP Relay Network

TA4922: The Suspected Chinese Crime Group is Going Global

shrun, apiwatcher, and argus: three malware analysis tools built with Claude  

VerdantBamboo: Just Another BRICKSTORM in the Firewall  

From Hand-Crafted Features to Large Language Models: A Comparative Evaluation of Android Malware Detection Paradigms

Memory-Based Detection of Obfuscated Malware Using PSO-Optimized Deep Learning to Enhance Cybersecurity Posture

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)