SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 110

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Malware Newsletter

Kimsuky Integrates AI into Attack Operations, From AI-Generated Decoy Documents to a Local LLM

ShieldBreak – August 2026 disclosure  

Kimwolf v7: An Evolution of the Kimwolf Botnet 

CISA, FBI and Partners Warn Organizations of Gunra Ransomware Actors Targeting Multiple Critical Infrastructure Sectors 

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw

AmnesiaStealer: a multi-stage Rust-based macOS infostealer that hijacks Chromium browsers  

Gone with the WindRelay: A New Malware Combo Behind a Growing Fraud Scheme  

PATCHCORD: New malware cluster targets Afghan telecom and South Asian critical infrastructure

737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection  

Concept Drift Detection and Adaptive Retraining of Malware Classification Models

A Comparison of Malware Image Transformations Using Grad-CAM and Hybrid Learning Models

C-GUARD: Context-Adaptive Conformal Gating for Improving Robustness Against Evasive Windows PE Malware

An Explainable Deep Learning Pipeline for Malware Family Classification: GAF Image Encoding and API-Grounded LLM Interpretation

APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)