↓
Skip to main content
Christoph Kemetmüller
Blog
About
Blog
About
Malware
2026
Oct 31
Hacked Tor exits intercepted SSH logins and planted Ebury backdoors
Byte
Oct 30
Cursor's marketplace served a backdoored Claude Code extension
Byte
May 31
Mini Shai-Hulud Worms Through TanStack npm Packages
Byte
May 22
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain
Byte
Mar 1
The Top 10 Most Prevalent MITRE ATT&CK Techniques
Byte
Mar 1
Malicious npm Packages Use Pastebin Steganography
Byte
Mar 1
Malicious Go “crypto” Module Steals Passwords
Byte
Jan 24
VoidLink: The Cloud-Native Malware Framework
Byte
Jan 24
GoBruteforcer feeds on weak defaults from AI-generated configs
Byte
Jan 24
A LinkedIn Job Offer Tried to Install Malware on My Machine
Byte
Jan 24
PeckBirdy: LOLBins Exploitation by China-aligned Threat Groups
Byte
Jan 11
Ghost Tapped: NFC Relay Fraud Goes Mobile
Byte
2025
Dec 12
Shai-Hulud 2.0 compromises about 700 npm packages
Byte
Jul 12
Arch Linux pulls three AUR packages that installed the CHAOS RAT
Byte
Apr 18
MirrorFace invites Europe to Expo 2025
Byte
Apr 18
Analysis of Spyware That Helped to Compromise a Syrian Army from Within
Byte
Mar 19
Operation AkaiRyū: MirrorFace invites Europe to Expo 2025 and revives ANEL backdoor
Byte
Feb 24
16 Malicious Chrome Extensions Infected Over 3.2 Million Users
Byte
Jan 5
Backdooring Your Backdoors - Another $20 Domain, More Governments
Byte
Jan 5
Malicious Extensions Circumvent Google’s Remote Code Ban
Byte
2024
Nov 29
Check Point picks apart Akira's Rust ransomware for ESXi
Byte
Nov 4
Hack the Hacker - How to Setup an SSH Honeypot
Byte
Jun 2
Operation Endgame hits six malware loaders and arrests four
Byte
Apr 18
CVE-2024-3094 - Backdoor in XZ
Vulnerability
2023
May 9
QakBot dominates the first edition of delivr.to's top 10 payloads
Byte
1
2
→
↑