Security Affairs Malware Newsletter Round 119: IronChain, XWorm, PEERSTITCH, GhostAction and iOS exploit chain research
The Security Affairs Malware Newsletter Round 119 is a weekly digest of malware research published by Pierluigi Paganini. It lists reports on IronChain ransomware, the evolution of XWorm from infostealer to surveillance platform, and the Hirudo banking malware spread through fake updates and patched banking apps. It also covers PEERSTITCH, a stealthy FortiGate implant uncovered by Unit 42, and an Italian phishing campaign delivering an iOS exploit chain. Other items cover the long-running GhostAction campaign (2025 to 2026), AdFection (zero-click mercenary spyware delivered through targeted ads, linked to Discover-Tech), Silent Lynx infrastructure tracking, the Malfex npm native addon loader and the CikaBika Discord RAT. The digest also lists several academic papers on malware detection and backdoors. The article gives only titles and no technical detail, IOCs or CVEs.
Linha do tempo
-
Security Affairs Malware Newsletter Round 119: IronChain, XWorm, PEERSTITCH, GhostAction and iOS exploit chain research
ler a análise desta fonte ocultar
The Security Affairs Malware Newsletter Round 119 is a weekly digest of malware research published by Pierluigi Paganini. It lists reports on IronChain ransomware, the evolution of XWorm from infostealer to surveillance platform, and the Hirudo banking malware spread through fake updates and patched banking apps. It also covers PEERSTITCH, a stealthy FortiGate implant uncovered by Unit 42, and an Italian phishing campaign delivering an iOS exploit chain. Other items cover the long-running GhostAction campaign (2025 to 2026), AdFection (zero-click mercenary spyware delivered through targeted ads, linked to Discover-Tech), Silent Lynx infrastructure tracking, the Malfex npm native addon loader and the CikaBika Discord RAT. The digest also lists several academic papers on malware detection and backdoors. The article gives only titles and no technical detail, IOCs or CVEs.