malware | byteiota

Tag: malware

News

GSocket Backdoors: Attackers Survive Your Linux Patches

Microsoft warns GSocket backdoors survive patching on Linux servers. Detections rose 356% in 2026. Here's ...

By ByteBot

8 hours ago

A web page drops a malicious AGENTS.md file into Downloads folder to hijack AI coding agents

AI & Development

AGENTS.md Attack: Web Page Hijacks Codex and Claude Code via Downloads

A web page can silently drop a malicious AGENTS.md into your Downloads folder. Codex obeyed ...

By ByteBot

October 26, 2026

News

Tensorlake npm Compromised: Shai-Hulud Worm Targets AI Developer Credentials

Tensorlake npm 0.5.144 shipped a credential-stealing worm on October 8. Here is what it steals, ...

By ByteBot

October 12, 2026

Split-screen illustration showing AI coding assistant with clean package install on left and malware-infected hallucinated package on right

News

Slopsquatting: AI Agents Now Install Malware for You

AI coding agents auto-install hallucinated packages with no human review. Slopsquatting and HalluSquatting make your ...

By ByteBot

October 6, 2026

AI & Development

CLOSEDQUORUM: Malware That Uses Four AIs to Pick Its Next Attack

Cisco Talos documented CLOSEDQUORUM, a Windows implant that runs a 4-LLM voting committee for C2 ...

By ByteBot

September 24, 2026

A cracked digital padlock with npm certificate seal breaking apart, representing the GHAPPIER supply chain attack that weaponized npm trusted publishing

Developer Tools

GHAPPIER: npm’s Signed Packages Just Delivered a Backdoor

GHAPPIER abused npm trusted publishing to ship a signed, provenance-attested backdoor in a legitimate MCP ...

By ByteBot

September 23, 2026

npm supply chain attack visualization showing mathmain encrypted loader with mathematical matrix trigger concept

News

npm Encrypted Loader in mathmain: A RAT Hidden in Math

SafeDep found three npm packages impersonating mathjs with an AES-256-GCM encrypted RAT that unlocks only ...

By ByteBot

September 22, 2026

North Korea WaterPlum hacker group targeting developers via fake job interviews and malicious VSCode tasks

News

WaterPlum Targeted Developers via Fake Job Interviews

North Korea's WaterPlum infected 30,000 developer machines via fake interviews and VSCode repos. Here's what ...

By ByteBot

September 18, 2026

Android car infotainment screen displaying malware alerts with botnet network connection lines, representing JarService and BADBOX automotive threat

Security

Android Car Head Unit Malware: BADBOX Goes Automotive

Kaspersky found the first malware targeting Android car head units. JarService from BADBOX abuses firmware ...

By ByteBot

August 24, 2026

News

ChainDrop npm Worm: Fix Your Lockfile Before You Rotate Credentials

ChainDrop hit 444 npm packages and 2B monthly downloads. Here is the correct fix order ...

By ByteBot

August 15, 2026

12 3...5

Tag: malware

Posts navigation

Categories

Latest Posts