Mur d'images - Cyberveille

curated by Decio

Dero miner spreads inside containerized Linux environments | Securelist

A miner and the ClipBanker Trojan being distributed via SourceForge | Securelist

SparkCat crypto stealer in Google Play and App Store

HZ Rat backdoor for macOS harvests data from WeChat and DingTalk

New Mandrake Android spyware version discovered on Google Play | Securelist

XZ backdoor behavior inside OpenSSH

Kaspersky analysis of the backdoor in XZ

A backdoor with a cryptowallet stealer inside cracked macOS software

A cascade of compromise: unveiling Lazarus' new campaign

StripedFly: Perennially flying under the radar

Dissecting TriangleDB, a Triangulation spyware implant

Not just an infostealer: Gopuram backdoor deployed through 3CX supply chain attack | Securelist

DNS changer in malicious mobile app used by Roaming Mantis

Stolen certificates in two waves of ransomware and wiper attacks

CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange

Malicious Tor Browser spreads through YouTube

NullMixer drops Redline Stealer, SmokeLoader and other malware | Securelist

Kimsuky’s GoldDragon cluster and its C2 operations | Securelist

Kaspersky report on Luna and Black Basta ransomware