SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 65

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Malware Newsletter

Smash and Grab: Aggressive Akira Campaign Targets SonicWall VPNs, Deploys Ransomware in an Hour or Less

First Malicious MCP in the Wild: The Postmark Backdoor That’s Stealing Your Emails  

EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks  

Phantom Taurus: A New Chinese Nexus APT and the Discovery of the NET-STAR Malware Suite  

SVG Phishing hits Ukraine with Amatera Stealer, PureMiner  

CABINETRAT backdoor used by UAC-0245 for targeted cyberattacks against SOU (CERT-UA#17479) 

Klopatra: exposing a new Android banking trojan operation with roots in Turkey  

Check Your Socks – A Deep Dive into soopsocks PyPI Package  

New spyware campaigns target privacy-conscious Android users in the UAE  

Rhadamanthys 0.9.x – walk through the updates

Detour Dog: DNS Malware Powers Strela Stealer Campaigns

Cavalry Werewolf raids Russia’s public sector with trusted relationship attacks         

Confucius Espionage: From Stealer to Backdoor

Zero-Day Ransomware Attack Detection Using Static Portable Executable Header Features

Robust Hashing for Improved CNN Performance in Image-Based Malware Detection

Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks

Defending against Stegomalware in Deep Neural Networks with Permutation Symmetry

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)