search
malware analysis
Trends
- 1PolinRider Malware Uses Ethereum Blockchain to Control Infected GitHub Repositories●(safedep.io) PolinRider Malware Leverages Ethereum Blockchain for Command and Control in GitHub Supply Chain Attack In b
Security researchers have detailed PolinRider, a loader family that infected more than 30 GitHub repositories in a supply chain attack aimed at stealing environment secrets. The malware stands out for using the Ethereum blockchain as its command-and-control channel, making its infrastructure harder to take down. Cybersecurity commentators are sharing the analysis as a warning to developers to audit dependencies and protect stored secrets.
- 2AI speeds up malware analysis, but judgment still matters●AI lets malware analysts go deeper and faster than ever before. The agent makes us fast, and our judgment makes us right
Security researcher Lenny Zeltser argues that AI is transforming malware analysis, letting analysts examine threats faster and in more depth than before. He writes that AI agents provide the speed while human judgment ensures accuracy, and shares practical tips for AI-assisted malware analysis on his site.
- 3Security researchers flag possible phishing site hosted on Weebly▼Possible Phishing 🎣 on: ⚠️hxxps[:]//yournexttwcindex[.]weebly[.]com 🧬 Analysis at: https:// urldna.io/scan/6abd72293b775
Cybersecurity watchers are warning about a suspected phishing website hosted on a Weebly subdomain, sharing a defanged link and pointing to a public URL analysis scan that breaks down the page's infrastructure. The alert is being circulated in infosec communities as an example of scammers abusing free website builders to host fraudulent pages.
- 4Microsoft details NeedyMantis malware used in targeted attacks●Posted yesterday, if you missed this. Microsoft: NeedyMantis: Unpacking a post-compromise malware family used in targete
Microsoft has published an analysis of NeedyMantis, a malware family deployed after attackers have already breached a network, with use in targeted operations against specific victims. The report breaks down how the malware behaves once inside a compromised environment. Security researchers and practitioners are sharing the findings, warning organisations to review the indicators of compromise Microsoft disclosed.