Hackers are delivering LegionLoader through an executable inflated to 882,716,672 bytes, roughly 842 MiB, to challenge security scanning limits. Researchers investigating an incident uncovered the delivery chain while examining ROMULUS, a shared ClickFix platform supporting multiple malware payloads. The investigation identified six IP addresses... Weiterlesen: Hackers Hide LegionLoader Malware in Massive Executable Files to Evad…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Hide LegionLoader Malware in Massive Executable Files to Evade Security Scanners
Hackers are delivering LegionLoader through an executable inflated to 882,716,672 bytes, roughly 842 MiB, to challenge security scanning limits. Researchers…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
11 sources
CVE-2025-39830 | Linux Kernel up to 6.16.4/6.17-rc3 mlx5 hws_pool_buddy_init memory leak (Nessus ID 265217 / WID-SEC-2025-2077)
10 more sources
VVulDB Updates1 hour agoCVE-2025-39829 | Linux Kernel up to 6.12.44/6.16.4/6.17-rc2 fgraph ftrace_suspend_notifier_call information disclosure (Nessus ID 265710 / WID-SEC-2025-2077) VVulDB Updates1 hour agoCVE-2025-39834 | Linux Kernel up to 6.16.4/6.17-rc3 mlx5 memory leak (Nessus ID 265185 / WID-SEC-2025-2077) VVulDB Updates1 hour agoCVE-2025-39810 | Linux Kernel up to 6.12.44/6.16.4/6.17-rc3 bnxt_set_dflt_rings tx_ring[] memory corruption (Nessus ID 265195 / WID-SEC-2025-2077) VVulDB Updates1 hour agoCVE-2025-39789 | Linux Kernel up to 6.16.3 crypto skcipher_walk allocation of resources (Nessus ID 264730 / WID-SEC-2025-2040) VVulDB Updates1 hour agoCVE-2025-39754 | Linux Kernel up to 6.12.42/6.15.10/6.16.1/6.17-rc1 mm smaps_hugetlb_range race condition (Nessus ID 264758 / WID-SEC-2025-2040) IIT Security News1 hour agoTwo CVSS 9.0 Linux KSMBD RCE Flaws Disclosed on Public Mailing Lists Before Kernel Fixes
+4
10 sources
CVE-2026-113874 | SmileCDR HAPI FHIR improper authorization (EUVD-2026-108274)
9 more sources
VVulDB Updates1 hour agoCVE-2026-115516 | KNIME Business Hub SaaS up to 1.18.x improper authorization (EUVD-2026-108270) VVulDB Updates1 hour agoCVE-2026-93336 | Canonical Juju up to 4.0.15 Unit Resources Download Route improper authorization (EUVD-2026-108266) VVulDB Updates1 hour agoCVE-2026-113873 | SmileCDR HAPI FHIR heap-based overflow (EUVD-2026-108273) VVulDB Updates1 hour agoCVE-2026-115416 | Amazon Athena up to 2026 Query Processing improper authorization (EUVD-2026-108258) VVulDB Updates1 hour agoCVE-2026-114487 | Devolutions Server up to 2026.2.20.0/2026.3.10.0 PAM AD Computer Import Endpoint improper authorization (EUVD-2026-108223) VVulDB Updates3 hours agoCVE-2026-115502 | KNIME Business Hub up to 1.18.x improper authorization (EUVD-2026-108229)
+3
5 sources
GitLab critical patches include one for a bug that allows code execution by unauthenticated users
4 more sources
BBlog8 hours agoNode2Shell: From Brotli Data to Remote Code Execution IIT Security News1 hour agoCritical Remote Code Execution Vulnerabilities in PHP Core IIT Security News1 hour agoMax-severity GitLab bug allows remote code execution over 12 years of releases Wwww.theregister.com2 hours agoMax-severity GitLab bug allows remote code execution over 12 years of releases
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4275859/malware-threat-intel/hackers-hide-legionloader-malware-in-massive-executable-files-to-evade-security-scanners/