Malware

The Edgecution malware exploits the Chrome Native Messaging protocol to enable communication between browser extensions and native desktop applications.

Microsoft, Proofpoint, IBM, Europol and other partners took aim the StealC and Amadey “assembly line.”

DragonForce ransomware abused Microsoft Teams relay infrastructure to hide C2 traffic.

The Windows variants, WIN_DRV and WIN_PLUS, retain the core architecture of their Linux predecessor, including command-and-control (C2) protocols and encryption methods.

Kaspersky researchers have identified that malicious actors are exploiting the Steam Workshop platform, specifically through the Wallpaper Engine application, to distribute malware.

The attackers send emails designed to raise alarm about potential account compromise and OTP abuse, tricking recipients into opening an attachment, according to the Genians Security Center.

The Argamal malware is distributed through adult game websites, file-sharing platforms, and torrent trackers.

OnyxC2 is being sold on cybercrime forums for as little as $250 per month, with developers offering refunds if their builds are detected, highlighting confidence in its evasion capabilities.