#onpatrol4malware search results

Malware Patrol

Oct 27

Our annual sale is on. New customers get 25% off the first year of any threat data feed subscription. Valid until Dec 31st. Request your free trial today. --> malwarepatrol.net/enterprise-eva… #CyberSecurity #ThreatIntel #onpatrol4malware

Malware Patrol

@MalwarePatrol

Feb 10

Our latest Security Signals newsletter is live.➡️And don't forget that we also offer (3) free, machine-readable #OSINT feeds with the IOCs shared in these featured articles. malwarepatrol.net/early-february… #onpatrol4malware #cybersec

Malware Patrol

@MalwarePatrol

Oct 25

It’s here: our only annual discount. New customers get 25% off your first year, until Dec 31st. Request your free trial today. --> malwarepatrol.net/enterprise-eva… #CyberSecurity #ThreatIntel #onpatrol4malware

Malware Patrol

@MalwarePatrol

Aug 23

#CORNFLAKE.V3 is a JavaScript or PHP #backdoor that executes payloads like shell commands, executables, and DLLs via HTTP. It gathers system info to send to remote servers and uses Cloudflare Tunnels to proxy traffic. #onpatrol4malware cloud.google.com/blog/topics/th…

MalwarePatrol's tweet card. A campaign involving a financially motivated group deploying a downloader that delivers CORNFLAKE.V3 malware.

A Cereal Offender: Analyzing the CORNFLAKE.V3 Backdoor | Google Cloud Blog

Source: cloud.google.com

Malware Patrol

@MalwarePatrol

Dec 7

Our annual sale is on. New customers get 25% off their first year's subscription. Offer includes all threat data feeds & packages. Valid until Dec 31st. Learn more. --> malwarepatrol.net/enterprise-thr… #CyberSecurity #ThreatIntel #onpatrol4malware

Malware Patrol

@MalwarePatrol

Oct 29

Our annual sale is underway. New customers get 25% off their first year's subscription. Includes all threat data feeds & packages. Valid until Dec 31st. Request your free trial today. --> malwarepatrol.net/enterprise-eva… #CyberSecurity #ThreatIntel #onpatrol4malware

Malware Patrol

@MalwarePatrol

Nov 3

Our annual sale is on. New customers get 25% off their first year's subscription. Includes all data feeds and packages. Valid until Dec 31st. Request your free trial today. --> malwarepatrol.net/enterprise-eva… #CyberSecurity #ThreatIntel #onpatrol4malware

Malware Patrol

@MalwarePatrol

Aug 26

Researchers found a #maliciousGoModule called "golang-random-ip-ssh-bruteforce." It poses as an SSH brute-force tool but sends credentials to its creator via a Telegram bot. #ThreatIntelligence #onpatrol4malware thehackernews.com/2025/08/malici…

MalwarePatrol's tweet card. Malicious Go module published June 24, 2022 steals SSH credentials via Telegram bot, evading detection.

Malicious Go Module Poses as SSH Brute-Force Tool, Steals Credentials via Telegram Bot

Source: thehackernews.com

Malware Patrol

@MalwarePatrol

Aug 24

Researchers have been tracking a #malware strain exploiting vulnerabilities to breach systems. Named “#Gayfemboy” by a cybersecurity firm, it resurfaced in July, targeting DrayTek, TP-Link, Raisecom, and Cisco, and shows evolution. #onpatrol4malware fortinet.com/blog/threat-re…

Malware Patrol

@MalwarePatrol

Aug 24

#APT36 cyberspies are using Linux .desktop files to deploy #malware against Indian government and defense organizations. Researchers report this targets data theft and espionage. #onpatrol4malware bleepingcomputer.com/news/security/…

MalwarePatrol's tweet card. The Pakistani APT36 cyberspies are using Linux .desktop files to load malware in new attacks against government and defense entities in India.

APT36 hackers abuse Linux .desktop files to install malware in new attacks

Source: bleepingcomputer.com

Malware Patrol

@MalwarePatrol

Aug 26

The #ArchLinuxProject has faced a #DDoSattack for over a week, affecting the Arch User Repository, main website, and forums. The repository and forums are now operational, but the main website is still impacted. #onpatrol4malware securityweek.com/arch-linux-pro…

MalwarePatrol's tweet card. The Arch Linux Project has been targeted in a DDoS attack that disrupted its website, repository, and forums.

Arch Linux Project Responding to Week-Long DDoS Attack

Source: securityweek.com

Malware Patrol

@MalwarePatrol

Aug 24

APT36 hackers abuse Linux .desktop files to install malware in new attacks

Source: bleepingcomputer.com

Malware Patrol

@MalwarePatrol

Aug 23

A Cereal Offender: Analyzing the CORNFLAKE.V3 Backdoor | Google Cloud Blog

Source: cloud.google.com

Malware Patrol

@MalwarePatrol

Aug 20

A report finds nearly 2 dozen #VPNapps on Google Play have security #vulnerabilities. Despite claims of independence, these VPN providers are interconnected, with some apps sharing code and passwords, posing significant risks. #onpatrol4malware securityweek.com/new-research-l…

MalwarePatrol's tweet card. Citizen Lab has identified links between multiple VPN providers, and multiple security weaknesses in their mobile applications.

New Research Links VPN Apps, Highlights Security Deficiencies

Source: securityweek.com

Malware Patrol

@MalwarePatrol

Aug 19

#HazyTiger is an India-nexus targeted intrusion adversary, primarily engaged in espionage and information theft. The actor has been active since at least 2015. Learn more about them on our #ThreatActorProfiles link below 👇 #onpatrol4malware malwarepatrol.net/threat-actor-p…

Malware Patrol

@MalwarePatrol

Aug 18

#BlackMatter is a Ransomware-as-a-Service (#RaaS) strain that encrypts files, removes recovery options, and extorts victims. #onpatrol4malware

ANY.RUN

@anyrun_app

Aug 18

🚨 BlackMatter is a stealthy #ransomware that hit 50+ organizations in just 4 months. From agriculture to manufacturing, it has already disrupted several critical supply chains. Ransom demands reach $30M in some cases 💰 ️See analysis & gather #IOCs: any.run/malware-trends…

anyrun_app's tweet image. 🚨 BlackMatter is a stealthy #ransomware that hit 50+ organizations in just 4 months.

From agriculture to manufacturing, it has already disrupted several critical supply chains. Ransom demands reach $30M in some cases 💰

️See analysis &amp; gather #IOCs: any.run/malware-trends…

Malware Patrol

@MalwarePatrol

Aug 18

Colt Technology Services experienced a cyberattack that has disrupted operations. The attacker, under the alias ‘cnkjasdfgd’ and purportedly part of the #WarLock #ransomware group, is allegedly selling one million stolen documents. #onpatrol4malware bleepingcomputer.com/news/security/…

MalwarePatrol's tweet card. UK-based telecommunications company Colt Technology Services is dealing with a cyberattack that has caused a multi-day outage of some of the company's operations, including hosting and porting...

Colt Telecom attack claimed by WarLock ransomware, data up for sale

Source: bleepingcomputer.com

Malware Patrol

@MalwarePatrol

Aug 13

Researchers have seen a significant rise in brute-force attacks on #Fortinet SSL VPN devices. Over 780 unique IP addresses from the US, Canada, Russia, and the Netherlands are involved. Make sure your security settings are up to date. #onpatrol4malware bleepingcomputer.com/news/security/…

Malware Patrol

@MalwarePatrol

Aug 9

#APT #SideWinder is copying government and defense login pages in Nepal, Bangladesh, and Turkey. They use Netlify and Pages.dev to host fake Zimbra and Secure Portal pages, tricking users into sharing their credentials. #onpatrol4malware hunt.io/blog/apt-sidew…

MalwarePatrol's tweet card. APT Sidewinder targets South Asian government and military portals using Netlify-hosted phishing pages to harvest credentials. Learn more.

APT Sidewinder Abuses Netlify to Mimic Government and Military Portals in South Asia

Source: hunt.io

Malware Patrol

@MalwarePatrol

Aug 8

A recent #malware bypassed almost every public sandbox and antivirus, except Threat.Zone, and even evaded EDR/XDR in real-world incidents. Many banks, ISPs, and organizations were impacted. #ThreatIntelligence #onpatrol4malware malwation.com/blog/technical…

SCENE 1: SoupDealer - Technical Analysis of a Stealth Java Loader Used in Phishing Campaigns...

Source: malwation.com

Malware Patrol

@MalwarePatrol

Aug 7

#EverestForms versions 3.2.2 and below have a security #vulnerability. When an admin views form submissions, the plugin may try to read unsafe data, which can be risky. #onpatrol4malware patchstack.com/articles/criti…

MalwarePatrol's tweet card. 🔓 Unauthenticated PHP object injection vulnerability found in Everest Forms (100K+ installs). ⚠️ Patch now to version 3.2.3 to stay secure. 🔍 Learn how the exploit works and how it was fixed.

Critical Vulnerability Impacting Over 100K Sites Patched in Everest Forms Plugin - Patchstack

Source: patchstack.com

Malware Patrol

@MalwarePatrol

Aug 7

Ukraine’s Defence Intelligence claims its hackers have stolen secret files from Russia’s “#KnyazPozharsky” nuclear submarine. The #StolenData could reveal important details about its technology. #onpatrol4malware bitdefender.com/en-us/blog/hot…

Malware Patrol

@MalwarePatrol

Aug 4

Cybersecurity researchers have found a new #AndroidTrojan, #PlayPraetor, infecting over 11,000 devices in several countries. It uses accessibility services to take remote control and can fake login screens for banking and crypto apps. #onpatrol4malware thehackernews.com/2025/08/playpr…

MalwarePatrol's tweet card. New Android malware PlayPraetor infects 11,000+ devices, targeting banking users via fake Play Store links.

PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads

Source: thehackernews.com

Malware Patrol

@MalwarePatrol

Aug 4

SentinelLABS and Beazley Security have discovered new #infostealer campaigns using Python-based #PXAStealer. These attacks use fake files, smart anti-analysis tricks, and stronger control systems to avoid detection. #onpatrol4malware sentinelone.com/labs/ghost-in-…

MalwarePatrol's tweet card. PXA Stealer uses advanced evasion and Telegram C2 to steal global victim data, fueling a thriving cybercrime market.

Ghost in the Zip | New PXA Stealer and Its Telegram-Powered Ecosystem

Source: sentinelone.com

Malware Patrol

@MalwarePatrol

Aug 4

#Mozilla has issued a warning to extension developers about a #phishing campaign targeting accounts on its AMO repository. Fake emails are pretending to be from the AMO team, asking for updates to keep access. #onpatrol4malware bleepingcomputer.com/news/security/…

MalwarePatrol's tweet card. Mozilla has warned browser extension developers of an active phishing campaign targeting accounts on its official AMO (addons.mozilla.org) repository.

Mozilla warns of phishing attacks targeting add-on developers

Source: bleepingcomputer.com

Malware Patrol

@MalwarePatrol

Aug 1

In late 2024, a #cyberattack affected the Russian IT industry and others. Attackers used social media and sites like GitHub to hide #CobaltStrikeBeacon. This method helped them avoid detection and build a complex attack chain. #onpatrol4malware securelist.com/cobalt-strike-…

MalwarePatrol's tweet card. A campaign targeting Russian entities leveraged social media, Microsoft Learn Challenge, Quora, and GitHub as intermediate C2 servers to deliver Cobalt Strike Beacon.

Targeted attacks leverage accounts on popular online platforms as C2 servers

Source: securelist.com

Malware Patrol

@MalwarePatrol

Aug 1

Threat actors used physical access and a new Linux anti-forensics method (#T1564.013) to hide in ATM switching systems. Only memory and network forensics could detect their custom #malware. This technique is now listed in MITRE ATT&CK. #onpatrol4malware group-ib.com/blog/unc2891-b…

Malware Patrol

@MalwarePatrol

Aug 1

#DPRK has changed its approach from direct crypto thefts to a more secretive model. Disguised IT workers now secure remote jobs at global tech firms, earning crypto and sending funds home through hidden networks. #ThreatIntelligence #onpatrol4malware dti.domaintools.com/from-laptops-t…

dti.domaintools.com

DomainTools Investigations | From Laptops to Laundromats: How DPRK IT Workers Infiltrated the...

This report maps the entire ecosystem of a DPRK IT worker infiltration scheme: key actors, GitHub aliases, laundering flows, shell companies, fake domains, platform infiltration, wallet infrastruct...

Source: dti.domaintools.com

Malware Patrol

@MalwarePatrol

Jul 31

A #BankerTrojan has changed how it spreads, now using #BogusWebsites that host malware samples directly within Discord channels. It can now capture screens and run new commands. Researchers found 25 old and 9 new samples. #onpatrol4malware zimperium.com/blog/behind-ra…

Behind Random Words: DoubleTrouble Mobile Banking Trojan Revealed

Source: zimperium.com

Malware Patrol

@MalwarePatrol

Jul 31

SentinelLABS identified 10+ patents for forensics and data collection tools registered by companies named in U.S. indictments for working with the #HafniumGroup. These tools can access encrypted data, mobile devices, and network traffic. #onpatrol4malware sentinelone.com/labs/chinas-co…

MalwarePatrol's tweet card. China-linked hackers used patented spyware tech from front companies tied to Hafnium, exposing gaps in cyber threat attribution.

China’s Covert Capabilities | Silk Spun From Hafnium

Source: sentinelone.com

Malware Patrol

@MalwarePatrol

Jul 30

#ToxicPanda is an #AndroidBankingTrojan designed to steal banking and digital wallet logins, overlay pin & pattern codes, and perform unauthorized transactions. The malware campaign peaked at 4500 infected devices in Europe. #onpatrol4malware bitsight.com/blog/toxicpand…

No results for "#onpatrol4malware"

Malware Patrol

@MalwarePatrol

Jun 18

Check out our latest biweekly blog post for a digest of the top #cybersec news. #onpatrol4malware malwarepatrol.net/infosec-articl…

Malware Patrol

@MalwarePatrol

Jul 2

Check out our latest biweekly blog post for a digest of the top #cybersec news. #onpatrol4malware malwarepatrol.net/infosec-articl…

Malware Patrol

@MalwarePatrol

Jun 20

Our Emergent Threats Domain Feed harnesses predictive intelligence to identify and block zero-day and emerging threats before they strike. Protect your networks and assets with intelligence that looks forward. Request a demo now. #onpatrol4malware malwarepatrol.net/emergent-threa…

Malware Patrol

@MalwarePatrol

Oct 27

Malware Patrol

@MalwarePatrol

Jun 20

#ToddyCat is an APT group that utilizes sophisticated backdoors and advanced infiltration techniques to achieve its espionage objectives. Learn more about them on our #ThreatActorProfiles link below 👇 #onpatrol4malware malwarepatrol.net/threat-actor-p…

Malware Patrol

@MalwarePatrol

Jul 29

Our Emergent Threats Domain data feed harnesses predictive intelligence to identify and block zero-day and emerging threats before they strike. Protect your networks and assets with intelligence that looks forward. Request a demo now. #onpatrol4malware malwarepatrol.net/emergent-threa…

Malware Patrol

@MalwarePatrol

Aug 19

Malware Patrol

@MalwarePatrol

Oct 25

Malware Patrol

@MalwarePatrol

Feb 10

Malware Patrol

@MalwarePatrol

Jun 16

The Emergent Threats Domains feed enhances traditional threat intelligence by providing forward-looking visibility into potential threats, allowing for the blocking of high-risk domains. Request a demo with us today. #onpatrol4malware malwarepatrol.net/emergent-threa…

MalwarePatrol's tweet image. The Emergent Threats Domains feed enhances traditional threat intelligence by providing forward-looking visibility into potential threats, allowing for the blocking of high-risk domains. Request a demo with us today. #onpatrol4malware

malwarepatrol.net/emergent-threa…

#APT41 is a highly sophisticated and very active Chinese state-sponsored APT group. It engages in both cyber espionage and financially motivated cybercrime activities. Learn more about them on our #ThreatActorProfiles link below 👇 #onpatrol4malware malwarepatrol.net/threat-actor-p…

Malware Patrol

@MalwarePatrol

Dec 7

Something went wrong.

#onpatrol4malware search results

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

ANY.RUN

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

DomainTools Investigations | From Laptops to Laundromats: How DPRK IT Workers Infiltrated the...

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

Malware Patrol

United States Trends