Malware

The attack, uncovered in July 2025, featured a phishing campaign using password-protected archives to distribute a new backdoor called BackDoor.ShellNET.1.

Threat actors' use of ClickFix social-engineering attacks surge in 2025.

Trustwave warns the new group aims to spread fear and extort companies for big payouts.

The report highlights how state-sponsored and criminal groups are leveraging AI tools like Gemini to automate and scale up attacks.

A recent attack achieved Domain Controller compromise in just 17 hours.

Windows machines' Hyper-V hypervisors are being targeted by Russia-linked threat operation Curly COMrades to establish a concealed Alpine Linux-based virtual machine enabling long-term network compromise and malware delivery as part of an attack campaign that commenced in July, The Register reports.

Rather than leveraging AI capabilities, the attacker stores commands in Assistant messages.

New BankBot-YNRK, DeliveryRAT Android banking trojans examined Android users could have their devices' data exfiltrated by the new BankBot-YNRK and DeliveryRAT banking trojans, The Hacker News reports.