New .NET CAPI Backdoor Targets Russian Auto and E-Commerce Firms via Phishing ZIPs

Cybersecurity researchers have shed light on a new campaign that has likely targeted the Russian automobile and e-commerce sectors with a previously undocumented .NET malware dubbed CAPI Backdoor. According to Seqrite Labs, the attack chain involves distributing phishing emails containing a ZIP...

New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs

Cybersecurity researchers have disclosed details of a new Rust-based backdoor called ChaosBot that can allow operators to conduct reconnaissance and execute arbitrary commands on compromised hosts. "Threat actors leveraged compromised credentials that mapped to both Cisco VPN and an over-privileg...

EUVD-1999-1275

Malware in sbrugna...

EUVD-2005-0520

Malware in sbrugna...

EUVD-2013-0260

Malware in sbrugna...

EUVD-2010-0688

Malware in sbrugna...

EUVD-2008-2803

Malware in sbrugna...

EUVD-2025-9302

Malicious code in bioql PyPI...

EUVD-2022-25224

Malicious code in bioql PyPI...

EUVD-2025-28860

Malicious code in bioql PyPI...

EUVD-2024-40931

Malicious code in bioql PyPI...

EUVD-2024-25048

Malicious code in bioql PyPI...

EUVD-2025-23786

Malicious code in bioql PyPI...

EUVD-2022-39030

Malicious code in bioql PyPI...

EUVD-2023-2317

Malicious code in bioql PyPI...

EUVD-2022-30457

Malicious code in bioql PyPI...

EUVD-2023-29641

Malicious code in bioql PyPI...

Malicious ZIP Files Use Windows Shortcuts to Drop Malware

Cybersecurity firm Blackpoint Cyber reveals a new spear phishing campaign targeting executives. Learn how attackers use fraudulent document ZIPs containing malicious shortcut files, leveraging 'living off the land' tactics, and a unique Anti-Virus check to deliver a custom payload...

IconEnvironmentDataBlock - Windows LNK File Special UNC Path NTLM Leak

This module creates a malicious Windows shortcut LNK file that specifies a special UNC path in IconEnvironmentDataBlock of Shell Link .LNK that can trigger an authentication attempt to a remote server. This can be used to harvest NTLM authentication credentials. When a victim browse to the locati...

SpecialFolderDatablock - Windows LNK File Special UNC Path NTLM Leak

This module creates a malicious Windows shortcut LNK file that specifies a special UNC path in SpecialFolderDatablock of Shell Link .LNK that can trigger an authentication attempt to a remote server. This can be used to harvest NTLM authentication credentials. When a victim browse to the location...