Latest Backdoor news

Malicious Dota 2 game modes infected players with malware

Security researchers have discovered four malicious Dota 2 game modes that were used by a threat actor to backdoor the players' systems.
- Sergiu Gatlan
- February 08, 2023
- 01:09 PM
- 0
Hackers use new IceBreaker malware to breach gaming companies

Hackers have been targeting online gaming and gambling companies with what appears to be a previously unseen backdoor that researchers have named IceBreaker.
- Bill Toulas
- February 01, 2023
- 09:45 AM
- 0
Lorenz ransomware gang plants backdoors to use months later

Security researchers are warning that patching critical vulnerabilities allowing access to the network is insufficient to defend against ransomware attacks.
- Ionut Ilascu
- January 10, 2023
- 04:30 PM
- 0
New Python malware backdoors VMware ESXi servers for remote access

A previously undocumented Python backdoor targeting VMware ESXi servers has been spotted, enabling hackers to execute commands remotely on a compromised system.
- Bill Toulas
- December 12, 2022
- 04:26 PM
- 0
New Windows malware also steals data from victims’ mobile phones

Security researchers found a previously unknown backdoor they call Dolphin that's been used by North Korean hackers in highly targeted operations for more than a year to steal files and send them to Google Drive storage.
- Bill Toulas
- November 30, 2022
- 03:51 PM
- 0
Backdoored Chrome extension installed by 200,000 Roblox players

Chrome browser extension 'SearchBlox' installed by more than 200,000 users has been discovered to contain a backdoor that can steal your Roblox credentials and assets.
- Ax Sharma
- November 23, 2022
- 06:07 AM
- 0
North Korean hackers target European orgs with updated malware

North Korean hackers are using a new version of the DTrack backdoor to attack organizations in Europe and Latin America.
- Bill Toulas
- November 15, 2022
- 05:24 PM
- 0
Hackers use Microsoft IIS web server logs to control malware

The Cranefly hacking group, aka UNC3524, uses a previously unseen technique of controlling malware on infected devices via Microsoft Internet Information Services (IIS) web server logs.
- Bill Toulas
- October 28, 2022
- 06:00 AM
- 0
Ursnif malware switches from bank account theft to initial access

A new version of the Ursnif malware (a.k.a. Gozi) emerged as a generic backdoor, stripped of its typical banking trojan functionality.
- Bill Toulas
- October 20, 2022
- 04:00 PM
- 0
OldGremlin hackers use Linux ransomware to attack Russian orgs

OldGremlin, one of the few ransomware groups attacking Russian corporate networks, has expanded its toolkit with file-encrypting malware for Linux machines.
- Ionut Ilascu
- October 20, 2022
- 11:03 AM
- 0
Hackers use new stealthy PowerShell backdoor to target 60+ victims

A previously undetected and undocumented PowerShell backdoor is being actively used by a threat actor who has targeted at least 69 entities.
- Bill Toulas
- October 19, 2022
- 12:29 PM
- 0
Hundreds of Microsoft SQL servers backdoored with new malware

Security researchers have found a new piece of malware targeting Microsoft SQL servers. Named Maggie, the backdoor has already infected hundreds of machines all over the world.
- Bill Toulas
- October 05, 2022
- 12:01 PM
- 0
Live support service hacked to spread malware in supply chain attack

The official installer for the Comm100 Live Chat application, a widely deployed SaaS (software-as-a-service) that businesses use for customer communication and website visitors, was trojanized as part of a new supply-chain attack.
- Bill Toulas
- October 03, 2022
- 01:58 PM
- 0
Hackers trojanize PuTTY SSH client to backdoor media company

North Korean hackers are using trojanized versions of the PuTTY SSH client to deploy backdoors on targets' devices as part of a fake Amazon job assessment.
- Bill Toulas
- September 15, 2022
- 04:45 PM
- 7
Chinese hackers create Linux version of the SideWalk Windows malware

State-backed Chinese hackers have developed a Linux variant for the SideWalk backdoor used against Windows systems belonging to targets in the academic sector.
- Ionut Ilascu
- September 14, 2022
- 08:07 AM
- 0
Microsoft: Russian malware hijacks ADFS to log in as anyone in Windows

Microsoft has discovered a new malware used by the Russian hacker group APT29 (a.k.a. NOBELIUM, Cozy Bear) that enables authentication as anyone in a compromised network.
- Bill Toulas
- August 25, 2022
- 12:36 PM
- 1
Exploit out for critical Realtek flaw affecting many networking devices

Exploit code has been released for a critical vulnerability affecting networking devices with Realtek's RTL819x system on a chip (SoC), which are estimated to be in the millions.
- Ionut Ilascu
- August 16, 2022
- 06:37 PM
- 0
Chinese hackers backdoor chat app with new Linux, macOS malware

Versions of a cross-platform instant messenger application focused on the Chinese market known as 'MiMi' have been trojanized to deliver a new backdoor (dubbed rshell) that can be used to steal data from Linux and macOS systems.
- Sergiu Gatlan
- August 12, 2022
- 04:45 PM
- 1
Chinese hackers use new Windows malware to backdoor govt, defense orgs

An extensive series of attacks detected in January used new Windows malware to backdoor government entities and organizations in the defense industry from several countries in Eastern Europe.
- Sergiu Gatlan
- August 08, 2022
- 09:36 AM
- 0
Microsoft Exchange servers increasingly hacked with IIS backdoors

Microsoft says attackers increasingly use malicious Internet Information Services (IIS) web server extensions to backdoor unpatched Exchange servers as they have lower detection rates compared to web shells.
- Sergiu Gatlan
- July 26, 2022
- 02:01 PM
- 0