SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 122

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Malware Newsletter

Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia  

Shutting the Door on the XCPE Botnet  

DarkBlinders: Inside an Active Espionage Campaign  

Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles  

Poisoned Source: APT29 watering holes target mobile devices with n-day exploits 

Hackers hijack cPGuard autoupdate to deploy backdoor, steal data  

CWPdoor: The Invisible Backdoor Living Inside Control Web Panel  

Insolence beyond belief. Threat actors target information security developers on GitHub  

What Malware Actually Does: An Empirical Analysis of Post-Infection Behavior Across Malware Families

MEvince: Knowledge-Constrained LLM Reasoning for Technique Identification from Malware Reports

A Log-to-Image Transformation Framework for Behavior-Aware Malware and Anomaly Detection

Decoding Maliciousness: LLM-Assisted Semantic Filtering for Scalable Malicious PyPI Package Detection

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, newsletter)