The Malware tag covers malware families, infrastructure analysis, incident impact, disruption efforts, and defensive guidance to reduce cybersecurity risk.
Search across headline titles and summaries.
Background for this topic.
Malware is software intentionally created or modified to perform unauthorized or harmful actions on a computer, device, or network. The term covers distinct families and functions, including viruses, worms, trojans, spyware, botnet clients, and ransomware; a single sample may combine several capabilities. Its behavior—not its label—determines the security concern: it may execute code, persist, alter or encrypt data, steal credentials, or provide unauthorized remote access.
For practitioners, malware reporting is most useful when it identifies the family or tool conservatively and provides evidence such as affected platforms, samples, infrastructure, or observed behavior. Defenses include promptly patching vulnerable software, restricting execution and privileges, monitoring endpoints and networks, maintaining tested backups, and isolating suspected systems for analysis. Detection should use behavior and verified indicators rather than names alone, since variants change. If malware processes personal or regulated data, investigations should also address privacy, evidence preservation, and applicable reporting obligations.
Weekly headline count for the current query.
Another month, another patch for in-the-wild iPhone malware (and a whole lot more).
Gozi threesome from way back in the late 2000s and early 2010s now all charged, convicted and sentenced. The DOJ got there in the end...
Latest episode - listen now. Full transcript inside...
Controlled outage used to keep malware marauders from gumming up the works. Learn what you can do to help in future...
These malware peddlers are specifically going after Mac users. The hint's in the name: "Atomic macOS Stealer", or AMOS for short.
Scanning tools, supply-chain malware, Wi-Fi hacking, and why there should be TWO World Backup Days... listen now!
New report admits that attackers were detected in the network about three months ago, and may have been attacking for about three years.
Tales of derring-do in the cyberunderground! (And some zero-days.)
An injury to one is an injury to all. Especially if the other people are part of your social network.
The criminals didn't implant any malware. The attack was orchestrated via malevolent configuration changes.
If you spew projects laced with hidden malware into an open source repository, don't waste your time telling us "no harm done" afterwards.
His co-conspirators went into and got out of prison years ago, while he remained free. Now the tables have turned...
An Office anti-malware setting that took more than 20 years to arrive... and fewer than 20 weeks to vanish again.
Sudden update! Zero-day browser hole! Drive-by malware danger! Patch Apple laptops and phones now...
It's been a long time coming, and we're not there yet, but at least Microsoft Office will be a bit safer against macro malware...