Malware
Researchers discover SSHStalker botnet infecting Linux servers
AI द्वारा रिपोर्ट किया गया AI द्वारा उत्पन्न छवि
Flare researchers have identified a new Linux botnet called SSHStalker that has compromised around 7,000 systems using outdated exploits and SSH scanning. The botnet employs IRC for command-and-control while maintaining dormant persistence without immediate malicious activities like DDoS or cryptomining. It targets legacy Linux kernels, highlighting risks in neglected infrastructure.
Cybersecurity researchers have identified a fraudulent website mimicking the popular AI tool Claude that delivers backdoor malware to visitors. The discovery highlights how cybercriminals are capitalizing on growing interest in artificial intelligence platforms.
AI द्वारा रिपोर्ट किया गया
Daemon Tools, a popular disk image mounting app, was compromised in a supply-chain attack starting April 8, delivering malware through official updates. Security firm Kaspersky reported infections on thousands of machines across over 100 countries. Users are urged to scan their systems immediately.
A North Korean hacking group known as UNC1069 has employed AI-generated videos to deliver malware targeting both macOS and Windows systems. This tactic highlights evolving methods in cyber threats. The development was reported by TechRadar on February 11, 2026.
AI द्वारा रिपोर्ट किया गया
Cyble Research and Intelligence Labs has revealed ShadowHS, a sophisticated fileless framework for post-exploitation on Linux systems. The tool enables stealthy, in-memory operations and long-term access for attackers. It features a weaponized version of hackshell and advanced evasion techniques.
Cisco Talos has reported a China-linked threat actor known as UAT-7290 that has been spying on telecommunications companies since 2022. The group uses Linux malware, exploits on edge devices, and ORB infrastructure to maintain access to targeted networks.
React2Shell exploits continue with large-scale Linux backdoor deployments and cloud credential theft
AI द्वारा रिपोर्ट किया गया
Ongoing exploitation of the React2Shell vulnerability (CVE-2025-55182)—previously detailed in coverage of China-nexus and cybercriminal campaigns—now includes widespread Linux backdoor installations, arbitrary command execution, and large-scale theft of cloud credentials.
FBI seeks victims of malware in Steam indie games
12 मार्च 2026 22:40US and Europe disrupt SocksEscort proxy network
11 मार्च 2026 07:1514,000 Asus routers infected by takedown-resistant KadNap malware
23 फरवरी 2026 08:01Malicious npm packages harvest crypto keys and secrets
20 फरवरी 2026 10:04Massiv android malware targets portuguese users with fake iptv app
24 जनवरी 2026 21:25Wiper malware targets Poland's energy grid but causes no blackout
22 जनवरी 2026 03:56Malicious PyPI package impersonates SymPy to deploy XMRig miner
21 जनवरी 2026 17:17Attackers hijack Linux Snap Store apps to steal crypto phrases
21 जनवरी 2026 05:18AI-assisted VoidLink malware framework targets Linux cloud servers
14 जनवरी 2026 21:57Check Point discovers advanced VoidLink Linux malware for clouds