Android.Backdoor.916.origin malware targets Russian business executives

New Android spyware Android.Backdoor.916.origin is disguised as an antivirus linked to Russia’s intelligence agency FSB, and targets business executives. Doctor Web researchers observed a multifunctional backdoor Android.Backdoor.916.origin targeting Android devices belonging to representatives of Russian businesses. The malware executes attacker commands, enabling surveillance, keylogging, and theft of chats, browser data, and even live camera/audio streams. […]

August 25, 2025
Read More >>

Electronics manufacturer Data I/O took offline operational systems following a ransomware attack

Electronics manufacturer Data I/O reports a ransomware attack to SEC, the company was forced to take offline operational systems. Electronics manufacturer Data I/O reported a ransomware attack to the US Securities and Exchange Commission (SEC). The company was forced to take offline operational systems following the attack. Data I/O is a leading provider of manual […]

August 25, 2025
Read More >>

Socialism with Chinese characteristics: A good venue for hawking plastic models

Exactly — it’s almost become its own unofficial tradition. New kit rolls down Chang’an Avenue for a hush‑hush rehearsal, sharp‑eyed photographers capture every bolt and contour, and before the paint on the real vehicle is fully dry, there’s already a shrink‑wrapped model on sale.  Please notice that the "ZTZ-25-1 lightweight Thank" is printed in the box, but its designation is not

August 25, 2025
Read More >>

IoT under siege: The return of the Mirai-based Gayfemboy Botnet

Mirai-based Gayfemboy botnet resurfaces, evolving to target systems worldwide; Fortinet researchers provided details about the new campaign. FortiGuard Labs researchers tracked a new Gayfemboy botnet campaign, the malware exploits known flaws in DrayTek, TP-Link, Raisecom, and Cisco, showing evolved tactics and renewed activity. The Gayfemboy botnet was first identified in February 2024, it borrows the […]

August 24, 2025
Read More >>

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 59

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Hunt.io Exposes and Analyzes ERMAC V3.0 Banking Trojan Full Source Code Leak   Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824 Supply Chain Risk in Python: Termncolor and Colorinal Explained       Noodlophile […]

August 24, 2025
Read More >>

STUFT-ed Again: PLAN Amphibious Augmentation and STUFT Drill

 On August 17, a fleet of seven large roll-on/roll-off vessels Bohai Zuanzhu, Bohai Baozhu, Bohai Feizhu, Zhonghua Fuxing, Yongxingdao, Changshandao, and Putuodao  sailed south and has now arrived in waters near Shanghai for a STUFT (Ships Taken Up From Trade) exercise. The drill aims to fine-tune large-scale sealift and transportation capabilities in times of crisis, demonstrating the

August 24, 2025
Read More >>