Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 23, 2026.
1–15 of 20
Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies
Evooo1Bot exploits known flaws to infect Linux edge devices, then adds SOCKS5 proxying, SSH brute force, credential theft, and DDoS.
- Source
- The Hacker News
Pre-Stuxnet Fast16 Malware Tampered with Nuclear Weapons Simulations
Fast16 corrupted nuclear simulations via 101 hook rules, targeting LS-DYNA and AUTODYN to sabotage weapons research.
- Source
- The Hacker News
PromptSpy Android Malware Abuses Gemini AI to Automate Recent-Apps Persistence
PromptSpy Android malware abuses Google Gemini to analyze screens, automate persistence, block removal, and enable VNC-based remote device control.
- Source
- The Hacker News
New DynoWiper Malware Used in Attempted Sandworm Attack on Polish Power Sector
ESET links Russia-backed Sandworm to a failed December 2025 cyberattack using DynoWiper malware against Poland’s power and renewable energy systems.
- Source
- The Hacker News
New VVS Stealer Malware Targets Discord Accounts via Obfuscated Python Code
VVS Stealer is a Python-based malware sold on Telegram that steals Discord tokens, browser data, and credentials using heavy code obfuscation.
- Source
- The Hacker News
Android Malware Operations Merge Droppers, SMS Theft, and RAT Capabilities at Scale
Android attackers use fake apps and droppers to spread the Wonderland SMS stealer, stealing OTPs, SMS data, and bank funds, mainly in Uzbekistan.
- Source
- The Hacker News
Kimwolf Botnet Hijacks 1.8 Million Android TVs, Launches Large-Scale DDoS Attacks
Kimwolf botnet infected 1.8 million Android TV devices and issued 1.7 billion DDoS commands, using ENS to hide its control servers.
- Source
- The Hacker News
GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of Installs
GlassWorm malware returns in VS Code extensions, hiding via Unicode and reviving itself through blockchain.
- Source
- The Hacker News
Astaroth Banking Trojan Abuses GitHub to Remain Operational After Takedowns
Astaroth banking trojan exploits GitHub for resilience, targeting Latin American users via phishing.
- Source
- The Hacker News
New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs
Rust-based ChaosBot exploits Discord and phishing to infiltrate networks, while Chaos-C++ adds data destruction.
- Source
- The Hacker News
RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features
RESURGE malware exploits Ivanti flaw CVE-2025-0282, adding stealth tools and web shells for persistence.
- Source
- The Hacker News
Researchers Uncover Malware Using BYOVD to Bypass Antivirus Protections
Malware exploits Avast driver to bypass antivirus, terminate 142 processes, and disable security protections
- Source
- The Hacker News
New FakeCall Malware Variant Hijacks Android Devices for Fraudulent Banking Calls
Discover how the advanced FakeCall Android malware employs vishing to hijack calls and steal data
- Source
- The Hacker News
Multiple Threat Actors Deploying Open-Source Rafel RAT to Target Android Devices
Learn about Rafel RAT, an Android malware tool posing as popular apps. Explore its risks, impacts, and preventive measures for mobile security.
- Source
- The Hacker News
NiceRAT Malware Targets South Korean Users via Cracked Software
Discover the latest threat of NiceRAT malware targeting South Korean users via cracked software.
- Source
- The Hacker News