Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 23, 2026.
English. 1–15 of 20
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Evooo1Bot exploits known flaws to infect Linux edge devices, then adds SOCKS5 proxying, SSH brute force, credential theft, and DDoS.
Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations
Fast16 corrupted nuclear simulations via 101 hook rules, targeting LS-DYNA and AUTODYN to sabotage weapons research.
PromptSpy Android Malware Abuses Gemini AI to Automate Recent-Apps Persistence
PromptSpy Android malware abuses Google Gemini to analyze screens, automate persistence, block removal, and enable VNC-based remote device control.
New DynoWiper Malware Used in Attempted Sandworm Attack on Polish Power Sector
ESET links Russia-backed Sandworm to a failed December 2025 cyberattack using DynoWiper malware against Poland’s power and renewable energy systems.
New VVS Stealer Malware Targets Discord Accounts via Obfuscated Python Code
VVS Stealer is a Python-based malware sold on Telegram that steals Discord tokens, browser data, and credentials using heavy code obfuscation.
Android Malware Operations Merge Droppers, SMS Theft, and RAT Capabilities at Scale
Android attackers use fake apps and droppers to spread the Wonderland SMS stealer, stealing OTPs, SMS data, and bank funds, mainly in Uzbekistan.
Kimwolf Botnet Hijacks 1.8 Million Android TVs, Launches Large-Scale DDoS Attacks
Kimwolf botnet infected 1.8 million Android TV devices and issued 1.7 billion DDoS commands, using ENS to hide its control servers.
GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of Installs
GlassWorm malware returns in VS Code extensions, hiding via Unicode and reviving itself through blockchain.
Astaroth Banking Trojan Abuses GitHub to Remain Operational After Takedowns
Astaroth banking trojan exploits GitHub for resilience, targeting Latin American users via phishing.
New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs
Rust-based ChaosBot exploits Discord and phishing to infiltrate networks, while Chaos-C++ adds data destruction.
RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features
RESURGE malware exploits Ivanti flaw CVE-2025-0282, adding stealth tools and web shells for persistence.
Researchers Uncover Malware Using BYOVD to Bypass Antivirus Protections
Malware exploits Avast driver to bypass antivirus, terminate 142 processes, and disable security protections
New FakeCall Malware Variant Hijacks Android Devices for Fraudulent Banking Calls
Discover how the advanced FakeCall Android malware employs vishing to hijack calls and steal data
Multiple Threat Actors Deploying Open-Source Rafel RAT to Target Android Devices
Learn about Rafel RAT, an Android malware tool posing as popular apps. Explore its risks, impacts, and preventive measures for mobile security.
NiceRAT Malware Targets South Korean Users via Cracked Software
Discover the latest threat of NiceRAT malware targeting South Korean users via cracked software.