malware

Indonesia: GoldFactory exploits Android Work Profile with Gigabud trojan to clone apps

— Analysis by EmeDotEme
#EmeDotEme #Ciberseguridad #Malware

⚠️ Beware: New malicious software targets Mac users to steal data

Cybersecurity researchers at Group-IB have uncovered new malware targeting Mac devices known as ClickLock Stealer. The malware locks the Mac device and prompts for the login password, posing as a legitimate login screen to steal users’ data. This news is important to raise security awareness.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#Malware #MacOS #Cybersecurity #DataSecurity #ClickLockStealer

🔗 Source: https://www.macworld.com/article/3193904/new-mac-malware-pretends-to-be-a-login-box-to-steal-your-data.html

Watch your package names or get rekt.

A new typosquatting campaign is hitting RubyGems to snatch crypto wallets. If you're a dev, double-check every package name before installing. One tiny typo and you're absolutely rekt.

#CyberSecurity #Malware ‎

$ETH USERS BEWARE: MALICIOUS PLUGIN COMPROMISES SYSTEMS 🔥

A fake Solidity plugin called juannegro.solidity has been found on the TRAE IDE marketplace. It auto-executes on startup, uses an Ethereum smart contract to update C2 commands, and was still available as of July 18th.

SlowMist confirmed the extension dropped on Open VSX, but TRAE users are still at risk. This is the kind of backdoor that steals keys and wallet data without a trace.

Have you checked your IDE extensions this week?

Not financial advice. Always manage your risk.

#ETH #Security #Malware #CryptoAlert

⚡

⚠️ Beware! New malicious code targets Mac users to steal passwords

Security company Group-IB discovered new malicious software called "ClickLock Stealer" that targets the macOS system. This software forces users to hand over their passwords through a series of fake system pop-up windows, without needing to exploit security vulnerabilities or obtain advanced access permissions.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#Malware #MacOS #Cybersecurity #PasswordStealing #ClickLock

🔗 Source: https://www.macrumors.com/2026/07/20/clicklock-malware-mac-users-giving-up-passwords/

⚠️ Beware: CrashStealer malware targets crypto wallets on Mac devices

New malicious software known as 'CrashStealer' targets macOS users. This malware exploits documented software tools (Werkbit) and uses system-matching interfaces to trick users into stealing Keychain data and browser passwords, as well as cryptocurrency wallets.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#Malware #MacOS #Cybersecurity #CryptoWallets #DataBreach

🔗 Source: https://www.foxnews.com/tech/crashstealer-mac-malware-steals-passwords-wallets

📰 Kaspersky Identifies Crypto Malware: Security firm uncovers malware framework targeting investors
On July 19, 2026, Kaspersky, the global cybersecurity firm, has identified a sophisticated malware framework specifically designed to target cryptocurrency investors. The threat highlights the growing sophistication of attacks on digital asset holders.
For traders holding Bitcoin $BTC , Ethereum $ETH , or any crypto assets, this serves as a critical reminder about security best practices: hardware wallets, verified software, and vigilance against phishing attempts are non-negotiable.

📌 Key Takeaway:
Crypto security threats evolve alongside the market's growth. The best defense is proactive — cold storage, verified downloads, and never sharing private keys remain the golden rules.

#CryptoSecurity #Malware #Kaspersky
#BinanceAlphaAlert

Crypto wallets under siege by TrapDoor malware.

TrapDoor attack targets crypto wallets, AWS keys and GitHub tokens
TrapDoor targets crypto wallets, AWS keys, and GitHub tokens through npm, PyPI, and Rust packages. This malware campaign poses a significant threat to crypto and blockchain developers. Traders and holders must be cautious with their credentials and watch for further updates on the attack.

#Crypto #Malware #CyberSecurity #Blockchain

📰 Kaspersky Warns of Crypto Malware Framework: Security firm identifies new threat vector
On July 22, 2026, Kaspersky identified a new malware framework specifically targeting cryptocurrency investors, capable of hijacking transactions and stealing private keys.
The framework, which can compromise both hot and cold wallet setups, represents an escalation in crypto-specific cyber threats.
The discovery should prompt all crypto users to review their security practices immediately.

📌 Key Takeaway:
Kaspersky's discovery of targeted crypto malware underscores the importance of hardware wallets and multi-factor authentication.

#Security #Malware #CryptoAlert
#BinanceAlphaAlert

Crypto users under attack by Windows malware.

Microsoft Warns Crypto Users About A Windows Clipper Malware Campaign
This malware can spread via USB and monitor wallet addresses, posing a significant threat to crypto holders. It also routes traffic through Tor, making it harder to track. Traders should be cautious when using public computers or inserting external devices.

#Crypto #Malware #CyberSecurity #Windows

Stay vigilant!

A new macOS malvertising campaign linked to North Korea is using fake software update screens to deploy crypto-stealing malware. Users should be cautious of unexpected system update prompts encountered while browsing.

#CyberSecurity #Malware ‎

🚨 New Malware Discovery Targeting Windows Systems

Cybersecurity researchers have uncovered details of an advanced malicious software framework based on the Python language, called "BraZetsu". This malware targets Windows devices and turns them into part of a clandestine criminal market for selling access to compromised systems. Reports indicate that this malware operates differently from traditional information-stealing programs.

━━━━━━━━━━━━━━
📊 Impact: 📊 Moderate
🏷️ OTHER

#Cybersecurity #Malware #Windows #TechNews #DataSecurity

📰 Source: thehackernews.com

🚨 Dismantling the infrastructure of the Sality botnet in a joint global operation

International law enforcement agencies, in cooperation with private-sector partners, succeeded in dismantling the infrastructure of the Sality botnet. The joint operation targeted disabling and removing this harmful peer-to-peer (P2P) network, which was being used for criminal purposes.

━━━━━━━━━━━━━━
📊 Impact: 📊 Medium
🏷️ OTHER

#Cybersecurity #LawEnforcement #Malware #GlobalCooperation #Botnet

📰 Source: bleepingcomputer.com

🚨 CISA Agency Adds 7 New Security Vulnerabilities to the Exploited Risks List

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced the addition of seven new security vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog. This addition comes after the exploitation of these vulnerabilities was observed by malicious actors to deploy malware such as cryptocurrency-mining tools and reverse-access components.

━━━━━━━━━━━━━━
📊 Impact: 📊 Medium
🏷️ OTHER

#Cybersecurity #CISA #Vulnerabilities #Security #Malware

📰 Source: thehackernews.com

🚨 U.S. cooperation to combat malware targeting cryptocurrencies

U.S. authorities are working with cybersecurity company CrowdStrike to confront the malware threat. The efforts focus on targeting the 'Sality' botnet network, which uses tools to hijack cryptocurrency wallets, where it replaces wallet addresses to steal thousands of dollars from users.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#CyberSecurity #Malware #CryptoSecurity #SalityBotnet #CrowdStrike

📰 Source: cointelegraph.com

🚨 Disassembly of a Russian malware network that targeted the crypto sector for eight years

Information security company CrowdStrike, in cooperation with federal authorities, succeeded in dismantling a complex malware network, allegedly Russian, that targeted digital assets and cryptocurrencies. The activity of this disruptive network continued for eight years, highlighting ongoing efforts to combat cybercrime in the field of digital assets.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#Cybersecurity #Malware #CryptoSecurity #DigitalAssets #CrowdStrike

📰 Source: cryptobriefing.com

⚠️ Warning: Fake apps targeting crypto holders with malicious software

A security report reveals the exploitation of fake apps that claim to provide AI services (Claude Opus 5) to distribute the malicious RevStealer software. These programs target the theft of passwords, cryptocurrency wallet data, and login information, posing a risk to crypto users.

━━━━━━━━━━━━━━
📊 Impact: 📈 High
🏷️ OTHER

#Cybersecurity #Malware #CryptoSecurity #InformationStealer #DigitalSafety

📰 Source: helpnetsecurity.com

🚨 Warning: Fake apps target Roblox users with malware

A recent report reveals the spread of fake script executors for the Roblox game, known as Xeno Executor, targeting players. These programs install malicious software that enables remote control of devices and the theft of sensitive information from victims. Users are strongly advised to be extremely cautious about these unofficial downloads.

━━━━━━━━━━━━━━
📊 Impact: 📊 Medium
🏷️ OTHER

#CyberSecurity #Malware #Roblox #Infostealer #TechNews

📰 Source: bleepingcomputer.com

⚠️ Arch Linux temporarily stops building AUR packages after a wave of malware

Temporarily stop the Arch Linux operating system’s package building process in the user repository (AUR) after discovering a malware campaign. The attackers exploited abandoned packages and took over administrator accounts to push malicious updates, affecting dozens of packages with the aim of stealing information.

━━━━━━━━━━━━━━
📊 Impact: 📊 Medium
🏷️ OTHER

#ArchLinux #Cybersecurity #Malware #OpenSource #SecurityAlert

📰 Source: 4sysops.com

⚠️ Arch Linux temporarily suspends AUR package approvals to counter malware

The Arch Linux project has announced a temporary suspension of the package approval process for community repositories (AUR) due to an increase in cases of malicious takeover of existing packages. This measure is intended to protect users from the spread of malicious software that targets the operating system.

━━━━━━━━━━━━━━
📊 Impact: 📊 Medium
🏷️ OTHER

#ArchLinux #Security #Cybersecurity #OpenSource #Malware

📰 Source: bleepingcomputer.com