SpyCloud Data Shows Corporate Users 3x More Likely to Be Targeted by Phishing Than by Malware

Austin, TX, USA, 4th December 2025, CyberNewsWire...

Newly Sold Albiriox Android Malware Targets Banks and Crypto Holders

Cleafy analysis reveals Albiriox, a new Android Malware-as-a-Service MaaS RAT that targets over 400 global banking and crypto apps. Learn how ODF fraud enables full device takeover...

PRC State-Sponsored Actors Use BRICKSTORM Malware Across Public Sector and Information Technology Systems

The Cybersecurity and Infrastructure Security Agency CISA is aware of ongoing intrusions by People’s Republic of China PRC state-sponsored cyber actors using BRICKSTORM malware for long-term persistence on victim systems. BRICKSTORM is a sophisticated backdoor for VMware vSphere1,2 and Windows...

ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts— and 15 More Stories

Think your Wi-Fi is safe? Your coding tools? Or even your favorite financial apps? This week proves again how hackers, companies, and governments are all locked in a nonstop race to outsmart each other. Here's a quick rundown of the latest cyber stories that show how fast the game keeps changing...

GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections

Cybercriminals associated with a financially motivated group known as GoldFactory have been observed staging a fresh round of attacks targeting mobile users in Indonesia, Thailand, and Vietnam by impersonating government services. The activity, observed since October 2024, involves distributing...

Malicious code in elf-stats-lanternlit-snowman-834 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5ba8a53d8eaf81612c735ecd48fa5c485199e190ba2e4047f1160d5ad1d9dc The package elf-stats-lanternlit-snowman-834 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-bright-cocoa-293 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0977b2c356749420c94387d2037758a63eca2cf223b813843e975652cdc9a2d3 The package elf-stats-bright-cocoa-293 was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-marzipan-cocoa-562 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5eef2a7b97397b3b317b2e74da3cf23e6c43147a144bed8c3fbcbb35ca6249f The package elf-stats-marzipan-cocoa-562 was found to contain malicious code. Source: ghsa-malware...

Malicious code in beep-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fb7d61c321c68fa3a32e4203e38cb8655096fa5022defb8a301465b6175111 The package beep-types was found to contain malicious code. Source: ghsa-malware 66ecb0f8992d72a62cefb71f46fb521f18db115c524a498cddbe82d3e98539ca Any...

MAL-2025-192293 Malicious code in tailwindcss-animation-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fda6d7eaefe792f8b06f7ef177feea15d90da13962dbe59f48d7987a234aca The package tailwindcss-animation-css was found to contain malicious code. Source: ghsa-malware...

Malicious code in email-validated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16af72446800f2251ecdda400ad30c23637f628d1487ae5c911bb4283e3fe10c The package email-validated was found to contain malicious code. Source: ghsa-malware 9f2a0d9794c8d949cc051fe3c306af63ddb55b6848d0607ef1f5d332585a2fc...

Malicious code in chai-test-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4f5ebd52a0912210e31f29b89e1199fadcf3bfddd5557b38e388f9b6df8315 The package chai-test-await was found to contain malicious code. Source: ghsa-malware a25b0475f84c41d68c89ffad60b4dc123876d634fbe93a793fae42da8e1112b...

Shai Hulud 2.0, now with a wiper flavor

In September, a new breed of malware distributed via compromised Node Package Manager npm packages made headlines. It was dubbed "Shai-Hulud", and we published an in-depth analysis of it in another post. Recently, a new version was discovered. Shai Hulud 2.0 is a type of two-stage worm-like malwa...

Malicious code in unified11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da60b6c513002dadf0ea32c3293c0c1f0e73d8db20f85baf9b207fff1311569 The package unified11 was found to contain malicious code. Source: ghsa-malware 0234999818b5c6447b46c2551778c8daea15a41767afd1270af691c637d8ea9d Any...

Malicious code in elf-stats-merry-cookiejar-442 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2205b339fd0b3a3399f352d8e9c75db19fcaf3558a7482f55afea84733d5172 The package elf-stats-merry-cookiejar-442 was found to contain malicious code...

Malicious code in elf-stats-merry-garland-548 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0446bc7b428d52a072e60b18969e2e9b35f19d70d6a77bc8176e76dd14506 The package elf-stats-merry-garland-548 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192201 Malicious code in elf-stats-merry-garland-548 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0446bc7b428d52a072e60b18969e2e9b35f19d70d6a77bc8176e76dd14506 The package elf-stats-merry-garland-548 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in elf-stats-mistletoe-bell-913 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e81c2bfd305b86a033e2e19a8881321de9937a52c0a2501ff927d1a4dbb690c The package elf-stats-mistletoe-bell-913 was found to contain malicious code...

Malicious code in elf-stats-shimmering-pinecone-965 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d06fd21e96708a5129220d816bca7cfae180e93e780de31e05976fafa0441ba The package elf-stats-shimmering-pinecone-965 was found to contain malicious code...

Malicious code in elf-stats-piney-ledger-864 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af23383cbe232cbec4b9c1e76435fba2261acf10212ff7c4c07a3deb35cb2505 The package elf-stats-piney-ledger-864 was found to contain malicious code...