tsecurity.de - News Radar & Live Feeds

SniffDog: I built my job-hunting friend a sniffer dog that sniffs out malware in fake recruiter repos

Mon, 05 Oct 2026 00:32:58 +0200

This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend What I Built SniffDog checks a take-home coding assignment before you run it. It reads the repo, never executes it, and tells you in plain English whether it's safe to open. I built it for my friend Mayank Raj. Earlier this year, Mayank, a final-year student hunting... Weiterlesen

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 117

Sun, 04 Oct 2026 16:49:10 +0200

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Lunex Unmasked: A New Information Stealer Deployed Through BYOVD Storm-3168: Agentic-driven cloud attacks using compromised service principals Don’t Call Us, We’ll Call Your APIs |... Weiterlesen

Cracked open the Google IPTV malware APK and found its C2 domain

Sun, 04 Oct 2026 10:22:17 +0200

submitted by /u/acealter [link] [comments] Weiterlesen

WordPress Hacked: Malware Removal and Recovery Guide

Sat, 03 Oct 2026 20:04:37 +0200

If your WordPress site was hacked and is now showing pharmaceutical spam, redirecting visitors to somewhere unpleasant, or has been flagged by Google as deceptive, start here rather than with a plugin. The instinct is to install a security scanner and click clean. That removes the visible symptom and leaves the way in, which is why so many sites... Weiterlesen

Google’s Android 17 Locks Accessibility Services to Verified Apps as Malware Threat Branches Out

Sat, 03 Oct 2026 19:47:12 +0200

Google is tightening restrictions on one of mobile malware's most persistent entry points. With Android 17, the company is limiting access to its AccessibilityService API to verified Accessibility Tools only, a change that takes effect the moment a user switches on Advanced Protection. The move, announced Thursday, targets a problem that has... Weiterlesen

Cling Malware Masquerades as Google STUN Traffic to Control Compromised IoT Devices

Sat, 03 Oct 2026 10:06:53 +0200

A newly identified IoT botnet, Cling, disguises its command-and-control communications as legitimate STUN traffic, including packets that appear to originate from Google’s public STUN infrastructure. The technique enables attackers to manage compromised internet-facing devices while blending activity into routine NAT-traversal traffic used by... Weiterlesen

Cling IoT Malware Masquerades as Google STUN Traffic to Hide C2 Communications

Sat, 03 Oct 2026 06:55:42 +0200

A newly observed IoT botnet named Cling exploits vulnerable internet-facing devices and disguises its command-and-control communications as legitimate STUN traffic, including packets that appear to originate from Google’s public STUN infrastructure. The technique lets operators hide malicious instructions amid common NAT-traversal traffic used by... Weiterlesen

Free malware analysis, reverse engineering and exploit development resources

Sat, 03 Oct 2026 05:04:26 +0200

submitted by /u/Potential-Couple-745 [link] [comments] Weiterlesen

Where to get resources and get started with malware dev?

Sat, 03 Oct 2026 05:04:26 +0200

So, I am a student persuing b tech cybersecurity course, and am pretty good in networkings and Linux systems. I also have some experience in pentesting, have solved some vulnhub machines on my own and have practiced on tryhackme. For programming, I can code in python, c, and c++. I want to get into malware development, but am not getting any solid... Weiterlesen

This new ChatGPT scam tricks you into installing malware – how to spot the trap

Fri, 02 Oct 2026 20:24:53 +0200

This authentic-looking scam starts with a sponsored Google link – and it’s catching people off-guard. Weiterlesen

Software Supply Chain Attacks Use Malicious npm Updates to Steal Credentials and Spread Malware

Fri, 02 Oct 2026 19:26:10 +0200

Software supply chain attacks are turning trusted developer tools into channels for credential theft and malware delivery. Campaigns involving S1ngularity, Shai-Hulud, and TeamPCP show how compromised packages can expose developer workstations, build systems, and cloud infrastructure through routine software updates. Rather than attacking each... Weiterlesen

SLTT C2 Traffic Tied to Remus Malware Distribution Operation

Fri, 02 Oct 2026 19:25:27 +0200

The CIS CTI team identified Remus infostealer distribution activity spanning March through September 2026. Read its analysis. Weiterlesen

Malwarebytes Download - Schutz vor Schadsoftware

Fri, 02 Oct 2026 19:21:23 +0200

Der Download von Malwarebytes installiert einen starken Schutz vor Schadprogrammen wie Viren oder Ransomware und wehrt selbst die neuesten Bedrohungen ab. Hierzu kombiniert Malwarebytes 5.7.2 verschiedene ... (Weiter lesen) Weiterlesen

Hackers Are Turning Trusted Software Updates Into Credential-Stealing Malware

Fri, 02 Oct 2026 19:17:35 +0200

A growing wave of supply-chain attacks is proving the opposite: attackers are compromising legitimate open-source packages and using trusted update channels to deploy credential-stealing malware directly into developer and enterprise environments. Malicious Nx releases, published after attackers stole an npm publishing token through a GitHub... Weiterlesen

Fake Zoom installer tries to trick Mac users into installing hidden malware

Fri, 02 Oct 2026 19:16:50 +0200

A new Mac threat is hiding inside something that looks like a normal Zoom installer, according to security researchers at Jamf Threat Labs. The file opens as a disk named Zoom and looks like the usual Mac installer: an app icon on the left, a shortcut to the Applications folder on the right. The catch is a set of instructions printed on the... Weiterlesen