Malware Analysis RSS Feeds

Directory0 malware analysis feeds · 13 articlesShow all languages →

Latest

Malware Analysis articles

GigaWiper: Microsoft uncovers destructive Golang backdoor assembled from multiple malware families

GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational platform. This blog analyzes how the malware incorporates code from several previously separate malware families and provides guid

Insighttechnologysecuritymalware analysismicrosoft.com·Tech by Flipboard·8d ago·16 min read

Revisiting Stuxnet: Technical Analysis of File-Hiding Rootkit Design and Kernel Mechanisms

Insighttechnologycybersecurity

Shared by @clibm079 ↗

malwareanalysisspace.blogspot.com18d ago

OXLOADER Malware Uses Advanced Obfuscation and Google Ads to Deploy CastleStealer Infostealer

Newstechnologycybersecurity

Shared by @undercode.bsky.social ↗

undercodetesting.com21d ago

Technical analysis of StealC and Amadey infostealers and the takedown of their cybercrime infrastructure

Insighttechnologysecurity

Shared by @threatintel.microsoft.com ↗

msft.it24d ago

Hotel Booking Phishing Campaign Uses TON Blockchain for C2 Infrastructure to Deliver TonRAT Malware

Hotel Booking Phishing Delivers TonRAT via Nodejs and TON Blockchain C2 — A Multi-Stage Cyberattack Analysis + Video - "Undercode Testing": Monitor hackers

Insighttechnologycybersecuritynews

undercodetesting.com·Tech by Flipboard·26d ago·9 min read

Malware spreading through Steam Workshop wallpapers targets gamers in China and Russia

Since late 2025, malware has been spreading rapidly through the Steam Workshop. In most cases, we caught old, familiar threats such as DarkKomet, the Lumma and Vidar infostealers.

Newstechnologycybersecuritygaming

securelist.com·Hacker News: Front Page·1mo ago·9 min read

North Korean State Hackers Use Fake Microsoft Security Alerts to Deploy NarwhalRAT Malware

ScarCruft (APT37) used Microsoft Account-themed spear-phishing to deliver NarwhalRAT via a malicious LNK in a ZIP, leading to multi-stage infection and credential theft.

Newstechnologycybersecuritynews