How Script-based Malware Attacks Work: Modern Examples 

Script-based malware is malicious software written in scripting languages like JavaScript, Python, PowerShell, or VBScript. Unlike traditional malware that relies on compiled executables, script-based malware leverages scripts that execute as human- …

New Malware Hijacks Docker Images Using Unique Obfuscation Technique

A recently uncovered malware campaign targeting Docker, one of the most frequently attacked services according to Darktrace’s honeypot data, has revealed a startling level of sophistication in obfuscation and cryptojacking methods. This novel attack begins …

Ripple XPRL Official NPM Package Hijacked To Inject Private Key Stealing Malware

A significant supply chain attack targeting cryptocurrency users. The official XRPL (Ripple) NPM package, which serves as the JavaScript SDK for the XRP Ledger, was compromised with malicious code designed to steal cryptocurrency private keys, potentially …

How to Remove Malware From Your Mac

No matter what you've heard, Macs get viruses too. There are a handful of indicators that your Mac may be infected by malware: your computer running slower or working harder than usual (or overheating), apps or programs crashing unexpectedly, or …

Malware Campaign Targets Crypto Wallets With Fake PDF Conversion Software

In brief A new malware campaign uses fake PDF to DOCX converters as a vector. Victims are tricked into executing a PowerShell command, installing SectopRAT variant Arechclient2. The malware can lift seed phrases and tap into Web3 APIs to drain assets. A …

Cryptojacking Malware Exploits Docker for Token Mining

Slopsquatting: The worrying AI hallucination bug that could be spreading malware

Software sabotage is rapidly becoming a potent new weapon in the cybercriminal arsenal, augmented by the rising popularity of AI coding. Instead of inserting malware into conventional code, criminals are now using AI-hallucinated software packages and …

Iran-Linked Hackers Target Israel with MURKYTOUR Malware via Fake Job Campaign

The Iran-nexus threat actor known as UNC2428 has been observed delivering a backdoor known as MURKYTOUR as part of a job-themed social engineering campaign aimed at Israel in October 2024. Google-owned Mandiant described UNC2428 as a threat actor aligned …

Malware Trends Q1 Report by ANY.RUN to Raise Company’s Threat Awareness

DUBAI, DUBAI, UNITED ARAB EMIRATES, April 23, 2025 /⁨EINPresswire.com⁩/ -- An acknowledged leader in cybersecurity, ANY.RUN grants malware analysts, security specialists, and other interested parties with access to its Q1 report. It contains …

Crypto drainers now sold as easy-to-use malware at IT industry fairs

Crypto drainers, malware designed to steal cryptocurrency, have become easier to access as the ecosystem evolves into a software-as-a-service (SaaS) business model. In an April 22 report, crypto forensics and compliance firm AMLBot revealed that many …