Malicious Crypto Miners Hide in Plain Sight Malware CyberDefenderDecember 24, 2025December 24, 20255 mins0 Miner malware (also called cryptomining malware or cryptojacking malware) is malicious software that secretly uses your device’s…continue reading..
WinRing0 : No Exploit Required and Kernel Takeover Malware CyberDefenderDecember 24, 2025December 24, 20255 mins0 WinRing0 is not inherently malware. It is a legitimate Windows kernel-mode driver (WinRing0x64.sys / WinRing0.sys) originally designed…continue reading..
Loki 2.1 Malware: Inside a Stealth Loader Chain Leveraging PowerShell, Go, and C++ Cyber Threat Intelligence AegironDecember 23, 2025December 23, 20258 mins0 Status: Active exploitation with new C++ dropper (November 2025) Delivery: Windows shortcut (LNK) files in ZIP archives…continue reading..
Gentlemen Ransomware: A Global Enterprise Disruption Campaign Malware AegironDecember 21, 2025December 21, 202511 mins0 1. Executive Summary Gentlemen ransomware is a modern, enterprise-focused ransomware operation that emerged in August 2025 and…continue reading..
BRICKSTORM Malware: How Attackers Turn Virtualization Platforms into Espionage Tools Malware CyberDefenderDecember 20, 2025December 20, 20259 mins0 BRICKSTORM is a sophisticated backdoor malware family used in targeted cyber-espionage operations, primarily against government, defense, and…continue reading..
ShadowPad Exploiting WSUS: How a Trusted Update Server Becomes a Silent Backdoor Malware AegironDecember 19, 2025December 19, 202511 mins0 Overview ShadowPad is a long-standing, advanced backdoor designed for stealth, persistence, and full remote control of compromised…continue reading..
TorrentLoader Campaign — Malicious Payloads Hidden Behind Popular Movie Torrents Malware AegironDecember 18, 2025December 18, 202510 mins0 Executive overview TorrentLoader is a malware delivery campaign that abuses public torrent platforms and file-sharing communities to…continue reading..
Impersonation at Scale: Android Malware Masquerading as Government Services Malware AegironDecember 18, 2025December 18, 202511 mins0 Threat Details This threat involves a set of malicious Android applications that disguise themselves as official government…continue reading..
Malware: Agent Tesla — Phishing-Driven Credential Theft Campaigns Targeting the Travel Sector Malware AegironDecember 18, 2025December 19, 20259 mins0 Executive overview Agent Tesla is a well-known information-stealing malware that has been active for years and continues…continue reading..
Malware: ShadyPanda — Large-Scale Browser Extension Hijacking Operation Malware AegironDecember 18, 2025December 19, 20258 mins0 Threat classification Overview ShadyPanda refers to a coordinated, large-scale malicious operation focused on hijacking legitimate browser extensions…continue reading..
