/
data_types_exposed:files × criticity:high × limpar

Resultados

4 casos · pág. 1/1

securelist.com · high

MovieReaper modular malware spreads via compromised itorrents.org torrent repository, using Solana blockchain for C2

Kaspersky identified MovieReaper, a previously unknown modular, multi-stage crimeware framework distributed since mid-August 2026 through movie-themed torrents, including fake "The Odyssey (2026)" releases. Rather than compromising individual trackers, the actor modified the public torrent file repository itorrents.org, so trackers relyin…

welivesecurity.com · high

FamousSparrow deploys new SparroWocky backdoor against Latin American governments, replacing SparrowDoor

ESET Research reports that the China-aligned APT group FamousSparrow has been using a new modular C++ backdoor, SparroWocky, since at least August 2025. The backdoor has replaced SparrowDoor as the group's main implant. From mid-2025 into 2026, about 90% of the group's targets in ESET telemetry were in Latin America, mostly governmental e…

bleepingcomputer.com · high

Candiru spyware delivered to Al Jazeera devices via malicious targeted ads in zero-click 'AdFection' attacks

Citizen Lab reports that Candiru spyware was delivered to devices at Al Jazeera Media Network through targeted online advertisements, in a zero-click attack that only required the malicious ad to render on the victim's device. Citizen Lab calls the technique AdFection and says its report is the first public technical confirmation of merce…

thehackernews.com · high

Cyber Partisans (Partisan Zmiy) hid Vasilek backdoor in VMware Tools in two-year intrusion at Russian healthcare organization

Russian firm Solar (a Rostelecom subsidiary) reported a nearly two-year intrusion at an unnamed Russian healthcare organization, attributed to the Belarus-aligned hacktivist cluster Partisan Zmiy (Cyber Partisans). Solar found the compromise in December 2025, but the earliest signs date to early 2024. Unlike the group's usual destructive …