Malware Distribution

30 reports

Malware Distribution North Korea South Korea United States [+5] North Korea Cyber Espionage Criminal Botnet Weaponization Cryptocurrency Theft Advanced Persistent Threat Operations

Cyfirma July 2026 Intel Report Documents Lazarus Group Botnet and Multi-Vector Escalation

North Korea's Famous Chollima deploys DLL injection and direct IP C2 in latest documented attack wave.
Malware Distribution Russia Multiple Russia [+4] Cyber Espionage Advanced Persistent Threat Operations AI-Enhanced Social Engineering AI Cyber Unit

Armored Likho APT Deploys AI-Generated BusySnake Stealer in Active Campaign

Kaspersky exposes Russian-linked APT using spear-phishing and AI loaders to deploy novel Python stealer.
Malware Distribution Russia Ukraine Russia [+5] Cyber Espionage Zero-Day Exploitation Advanced Persistent Threat Operations AI-Enhanced Social Engineering Kernel-Level Rootkit Implantation

Hacker News Weekly Recap Documents Turla Backdoor and AI Malware Escalation

Linux kernel flaws, Turla's persistent backdoor operations, and AI-enhanced infostealer techniques headline June 2026 cyber threat landscape.
Malware Distribution Unknown Global Other [+3] Cyber Espionage Living-off-the-Land Exploitation Advanced Persistent Threat Operations

StrikeShark Global Campaign Delivers Cobalt Strike Through Novel SharkLoader Malware

Kaspersky documents a new multi-stage attack chain targeting organizations globally with professional-grade penetration tools.
Malware Distribution Russia Ukraine Russia [+3] Cyber Espionage Living-off-the-Land Exploitation Advanced Persistent Threat Operations

Google Exposes Turla's STOCKSTAY Backdoor in Ukraine Espionage Campaign

Russian FSB-linked APT deploys new .NET implant against Ukrainian targets in 2026 campaign.
Malware Distribution China Canada United States [+5] China Cyber Espionage Living-off-the-Land Exploitation Advanced Persistent Threat Operations Kernel-Level Rootkit Implantation

China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth

Previously Linux-only Chinese espionage backdoor evolves to target Windows systems using kernel-level driver concealment techniques.
Malware Distribution Other Russia Other [+1] Telecommunications Infiltration

Russian FSB Accuses Foreign Intelligence of Smartphone Surveillance Campaign

Federal Security Service claims malware implanted on high-ranking officials' mobile devices for espionage
Malware Distribution China Global China [+2] Cyber Espionage Supply Chain Exploitation

Chinese State-Backed Actors Trojanize Daemon Tools Software for Global Espionage Campaign

China-linked threat actor compromised legitimate software distribution to infect thousands of systems worldwide
Malware Distribution Unknown Unknown Other [+2] API Key Theft Cloud Trust Abuse

GoGra Linux Malware Exploits Microsoft Graph API for Covert Command and Control Operations

Advanced malware uses Outlook inbox as communication channel to evade detection systems
Malware Distribution Iran United States Iran [+2] Cyber Espionage Transnational Repression

U.S. Authorities Dismantle Iranian Cyber Network Targeting Journalists and Dissidents

Operation Used Advanced Spyware to Monitor Political Opponents and Silence Dissenting Voices
Malware Distribution China Global China [+3] Cyber Espionage Military Espionage Advanced Persistent Threat Operations

China-Linked Hackers Conducted Multi-Year Espionage Campaign Against Southeast Asian Military Organizations

Custom malware tools targeted intelligence on military capabilities and Western defense partnerships
Malware Distribution Russia Romania Slovakia [+7] Ukraine United States Russia Cyber Espionage Zero-Day Exploitation Advanced Persistent Threat Operations RTF Weaponization

Russian APT28 Deploys New Exploit Against Eastern European Targets

Operation Neusploit leverages CVE-2026-21509 vulnerability in coordinated campaign across Ukraine, Slovakia, and Romania
Malware Distribution North Korea Global United Arab Emirates [+3] North Korea Supply Chain Exploitation Cryptocurrency Theft

North Korean Hackers Execute Record $1.5 Billion Cryptocurrency Heist Against Bybit Exchange

Lazarus Group's sophisticated attack on Dubai-based platform marks largest crypto theft in history
Malware Distribution Unknown France Other [+2] Remote Device Control Critical Infrastructure Mapping

France Investigates Foreign Interference After Passenger Ship Hit by Remote-Control Malware

Maritime cyber attack prompts national security investigation into potential state-sponsored vessel compromise
Malware Distribution Russia Ukraine Russia [+2] Cyber Espionage Military Espionage

Russian Cyber Operations Target Ukrainian Military Communications Through Credential Theft Campaign

Phishing attacks against armed forces personnel and defense contractors seek access to messaging platforms and internal systems
Malware Distribution China United States China [+9] Cyber Espionage Infrastructure Attacks Technology Transfer Government Infiltration Military Espionage Persistent Network Infiltration Intelligence Exposure Advanced Persistent Threat Operations Critical Infrastructure Mapping

House Committee Documents 60 Chinese Espionage Cases Across Four Years

Updated threat assessment reveals expanding CCP intelligence operations targeting US military and commercial secrets
Malware Distribution Iran Global Iran [+3] Infrastructure Attacks Industrial Sabotage Payment Card Breach

Iranian IRGC-Linked Groups Deploy IOCONTROL Malware Against Critical Infrastructure

Cybersecurity researchers expose attacks targeting water and fuel systems with data theft capabilities
Malware Distribution North Korea United States North Korea [+4] Identity Spoofing Cryptocurrency Theft AI-Enhanced Social Engineering Deceptive Job Recruitment

North Korean Hackers Target Cryptocurrency Firms with Advanced Social Engineering Campaigns

FBI warns of sophisticated impersonation tactics designed to steal digital assets and fund weapons programs
Malware Distribution North Korea Global North Korea [+3] Zero-Day Exploitation Persistent Network Infiltration Advanced Persistent Threat Operations

North Korean Hackers Exploit JetBrains TeamCity Flaw for Global Cyber Operations

Diamond Sleet and Onyx Sleet groups deploy malware through software development infrastructure
Malware Distribution Russia Ukraine Russia [+2] Cyber Espionage Coordinated Cyber Warfare

Russian Hackers Deploy Sophisticated Malware Against Ukrainian Organizations

New phishing campaign extracts sensitive data as cyber warfare intensifies
Malware Distribution North Korea Various North Korea [+2] Identity Spoofing Advanced Persistent Threat Operations

North Korean APT37 Disguises Malware as Password Files in Social Engineering Campaign

Operation demonstrates coordination between Pyongyang's cyber units and evolving deception tactics
Malware Distribution Iran Global Iran [+1] Cyber Espionage

Iranian Intelligence-Linked Hackers Target Middle East Organizations in Backdoor Campaign

Tehran-affiliated group deploys custom malware to compromise email systems across regional targets
Malware Distribution China United States China [+4] Cyber Espionage Military Espionage Persistent Network Infiltration Vulnerability Scanning

Chinese Cyber Groups Deploy 17 Malware Families Against US Defense Contractors

UNC3886 and UNC5221 operations demonstrate sustained espionage campaign targeting aerospace sector
Malware Distribution Russia Ukraine Russia [+3] Cyber Espionage Criminal Botnet Weaponization Infrastructure Hijacking

Russian Turla Group Hijacks Dismantled Cybercrime Infrastructure for Espionage Operations

FSB-linked hackers repurpose ANDROMEDA botnet domains to deploy targeted malware against Ukrainian entities
Malware Distribution Russia Germany Russia [+2] Cyber Espionage Crisis Theme Exploitation

Russian PowerShell Malware Campaign Exploits German Interest in Ukraine Conflict

Custom remote access trojan demonstrates Moscow's information warfare expansion beyond Ukraine's borders
Malware Distribution North Korea Global United States [+5] North Korea Cyber Espionage Supply Chain Exploitation Cryptocurrency Theft Advanced Persistent Threat Operations

North Korean APT Groups Target Blockchain Sector in Systematic Cryptocurrency Theft Campaign

Federal agencies detail tactics used by Lazarus Group and allied units since 2020
Malware Distribution China Ukraine United States [+3] China Cyber Espionage Advanced Persistent Threat Operations

Chinese State-Sponsored APT41 Hackers Intensify Global Cyber Espionage Campaign During 2021-2022

Advanced persistent threat group deploys sophisticated malware targeting government networks
Malware Distribution North Korea United States North Korea [+3] Cyber Espionage Supply Chain Exploitation Living-off-the-Land Exploitation

North Korean Lazarus Group Weaponizes Windows Update Client in Spearphishing Campaign

APT deploys living-off-the-land technique targeting defense contractor communications
Malware Distribution Russia Ukraine Russia [+2] Infrastructure Attacks Wiper Attacks

WhisperGate Malware Campaign Targets Ukrainian Systems Ahead of Russian Invasion

Destructive cyberattack mirrors 2017 NotPetya tactics as precursor to military action
Malware Distribution North Korea South Korea North Korea [+3] Cyber Espionage Supply Chain Exploitation Watering Hole Attacks

North Korea's Lazarus Group Infiltrates South Korean Security Software Company

Hackers compromise Initech to identify vulnerabilities in software protecting over 10 million computers
Select an article to read