Malware

China-linked Linux backdoor first spotted in 2021, but now runs inside the kernel of core telecom servers and Kubernetes pods.

Russian law enforcement was reported to have apprehended the alleged administrator of the cybercrime forum LeakBase, reports The Hacker News.

Armenian Hambardzum Minasyan has been extradited to the U.S. to face charges related to his alleged involvement in the RedLine information-stealing operation, according to CyberScoop.

Security Affairs reports that the U.S. Department of Justice announced that Russian national Ilya Angelov has been sentenced to two years in prison, fined $100,000, and ordered to pay $1.6 million in money judgment over his co-management of the TA551 cybercrime operation, also known as Mario Kart, which launched a botnet used in ransomware attacks against U.S. organizations.

Officials at Puerto Rico's Department of Transportation have cancelled all upcoming driver's license, permit, and vehicle registration appointments at the Centros de Servicios al Conductor agency following a cyberattack discovered earlier this week, according to The Record, a news site by cybersecurity firm Recorded Future.

Activity of botnets has increased by 26% and 24% during the first and second half of 2025, respectively, with the escalation primarily driven by U.S.-based bots and nodes, as well as the ongoing evolution of the Mirai malware, according to HackRead.

BleepingComputer reports that the newly emergent Torg Grabber information-stealing malware, which is being spread through the ClickFix technique, has been targeting 850 browser extensions, most of which are for cryptocurrency wallets.