The Chinese-linked group Mustang Panda used a kernel-level rootkit to deploy undetectable TONESHELL malware, targeting ...

A new sample of the ToneShell backdoor, typically seen in Chinese cyberespionage campaigns, has been delivered through a kernel-mode loader in attacks against government organizations.

The China-linked Mustang Panda APT has been using a kernel-mode rootkit in attacks leading to ToneShell backdoor deployments.

Mustang Panda deployed TONESHELL via a signed kernel-mode rootkit, targeting Asian government networks and evading security ...

Dozens of organizations have been infected with router malware that uses a packet-sniffing technique to minimize its footprint. Rather than their far more popular Cisco counterparts, the campaign, ...

The Chinese Winnti hacking group is using a new PHP backdoor named 'Glutton' in attacks on organizations in China and the U.S., and also in attacks on other cybercriminals. Chinese security firm QAX's ...

An unknown PowerShell backdoor has been discovered alongside a new variant of the Zloader/SilentNight malware, Walmart’s Cyber Intelligence Team has reported. The PowerShell backdoor has been ...

Researchers have unearthed Linux malware that circulated in the wild for at least two years before being identified as a credential stealer that’s installed by the exploitation of recently patched ...

Kaspersky finds 15 malicious GitHub repositories posing as proof‑of‑concept exploits, some crafted with Gen AI Victims ...

The move came two weeks after the Trump administration reversed course to allow Nvidia to sell the coveted artificial intelligence chips in China. By Meaghan Tobin and Xinyun Wu Reporting from Taipei, ...

XZ Utils Supply Chain Attack: A Threat Actor Spent Two Years to Implement a Linux Backdoor Your email has been sent Read about a supply chain attack that involves XZ Utils, a data compressor widely ...