Malware News - ipban.one

Network server racks and cables illustrating cybersecurity and botnet infrastructure

Malware 2026-11-03 19 views

Google Disrupts XCPE Botnet on 1.3 Million Android TV Boxes

Google disrupted the XCPE botnet on more than 1.3 million Android TV boxes, banned manufacturer Videostrong and targeted affiliate malware infrastructure.

Read more →

Black server racks in a data center illustrating cybersecurity and software supply chain protection

Malware 2026-10-25 24 views

LiteLLM Supply Chain Attack Traced to Unrevoked Master Key

LiteLLM investigators traced a poisoned Python release to an unrevoked master key, stolen GitHub tokens and abused workflows. Exposed secrets require rotation.

Read more →

Server racks and a workstation in a data center, illustrating cybersecurity monitoring

Malware 2026-09-16 37 views

HEAVYGRAM Spyware Targets Dissidents, Joint Advisory Warns

US, UK and Dutch agencies warn that HEAVYGRAM spyware targets dissidents and journalists through deceptive messages, enabling surveillance and data theft.

Read more →

Black server racks in a data center, illustrating cybersecurity and malware defense

Malware 2026-09-14 43 views

Sogou Input Method Flaw Exploited to Deploy GrayRabbit

Attackers exploited a Sogou Input Method flaw to deploy GrayRabbit on Windows. Researchers detail the attack chain and urge users to install the latest update.

Read more →

Cybersecurity analyst monitoring network activity during a botnet disruption

Malware 2026-09-02 46 views

International Operation Disrupts Sality P2P Botnet

A multinational operation isolated more than 15,000 Sality-infected computers, seized linked domains and blocked the botnet operator's command channel.

Read more →

Cybersecurity analyst investigating infostealer malware and stolen Claude sessions

Malware 2026-09-01 43 views

Infostealers Hijack Claude Sessions to Drain AI Usage

Infostealer malware is stealing active Claude sessions to hijack accounts and consume AI usage, prompting session revocation and endpoint cleanup guidance.

Read more →

Cybersecurity analyst examining Android banking malware on a laptop

Malware 2026-08-24 53 views

ToxicPanda Android Malware Expands to 349 Finance Apps

ToxicPanda Android malware now targets 349 finance apps, abusing VPN, Accessibility and Wireless ADB features to seize deeper control of infected phones.

Read more →

Android car head unit and infotainment screen affected by malware

Malware 2026-08-23 71 views

Android Car Head Unit Malware Creates Proxy Botnet

Android car head unit malware spread through a legitimate updater, creating proxy botnet nodes for traffic relaying and online advertising fraud operations.

Read more →

Computer screen displaying source code during a Rust supply chain attack investigation

Malware 2026-08-20 53 views

Rust Crates Poisoned in Build-Time Supply Chain Attack

Three Rust crates were poisoned to run credential-stealing malware during builds, exposing developer and CI systems before crates.io removed the releases.

Read more →

Server racks representing developer infrastructure targeted by the ChainDrop npm supply-chain attack

Malware 2026-08-05 50 views

ChainDrop npm Worm Compromises Hundreds of Packages

ChainDrop compromised hundreds of npm packages tied to Keyv and Cacheable, stealing developer credentials and spreading through trusted publishing access.

Read more →