VoidLink Malware Exhibits Multi-Cloud Capabilities and AI Code
VoidLink, a Linux-based C2 framework, facilitates credential theft, data exfiltration across clouds
Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.
Search across headline titles and summaries.
Weekly headline count for the current query.
VoidLink, a Linux-based C2 framework, facilitates credential theft, data exfiltration across clouds
Sophisticated malware previously thought to be the work of a well-resourced cyber-crime group was built by one person - with the aid of AI tools
Detected by Check Point researchers, VoidLink is a sophisticated malware framework that can be used to implant malware in the most common cloud environments
Backdoor malware Auto-Color targets Linux systems, exploiting SAP NetWeaver flaw CVE-2025-31324
A new malware campaign targeting Windows and Linux systems has been identified, deploying tools for evasion and credential theft
DaggerFly’s Lunar Peek campaign is using a new malware strain, identified by FortiGuard Labs, to compromise Linux networks
New Linux malware WolfsBane and FireWood have been linked to Gelsemium APT, a cyber-espionage group targeting critical systems
Symantec said Chinese espionage group Daggerfly has updated its malware toolkit as it looks to target Windows, Linux, macOS and Android operating systems
The ELF backdoor, initially thought to be a variant of existing malware, has a Windows and a Linux version
SentinelLabs researchers identified the malware as a new variant of AcidRain, which shut down thousands of Viasat satellites in Ukraine and Western Europe in 2022
The actor utilizes custom Linux malware to pursue financial gain, according to Check Point Research
Cado said the payloads facilitated RCE attacks by leveraging common misconfigurations and known vulnerabilities
Cado Security said this campaign introduces unique techniques to compromise the security of Redis servers
The flaw allows the installation of malware that operates at the firmware level
Identified as CVE-2023-46604, the vulnerability has a CVSS score of 9.8
Cado Security said the malware acts as a botnet and is compatibille with both Windows and Linux
The Palo Alto Networks report also suggests Linux malware emerged as a growing concern last year
According to Unit 42, the variant uses the same AES key as the original Windows PE malware
The Trojan exploits known vulnerabilities in outdated WordPress plugins and themes
The malware was detected in campaigns targeting firms in the industrial and pharmaceutical space