SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 111

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Malware Newsletter

Akira Hits Safe Mode: Ransomware Rebooting Around EDR 

Multi-Functional Linux Botnet “Evooo1Bot”     

StubMaker RubyGems Campaign Delivers a Windows Infostealer  

Hunting MacSync Stealer infrastructure through behavioral pivots 

Manic: Blend between Banking Malware & Spyware  

Clop Returns with Custom Implant in Mass-Extortion Campaign

The ToxicPanda Never Sleeps: ToxicPanda 2.0 Prepares its Next Strike on Mobile

Striking gold: Inside the GoldDigger Android malware     

SilkParasite: Tracking a China-Nexus APT Across Central Asia

Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant  

The invisible passenger in your car

Malware Crypting Services and the Threat Actors Who Sell Them 

Grandoreiro goes north: From Brazil to Mexico with a new DLL sideloading campaign  

Survival of~the~Stealthiest: Evolving Low-Entropy Ransomware via~Genetic Algorithms

Malformer: A Multi-Modal Malware Detector Using Transformers

XAI-Guided Graph-Based Feature Engineering and Heterogeneous Ensemble Learning for Android Malware Detection

An Explainable Deep Learning Pipeline for Malware Family Classification: GAF Image Encoding and API-Grounded LLM Interpretation

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)