Malware News
Kanalga Telegram’da o‘tish
The latest NEWS about malwares, DFIR, hacking, security issues, thoughts and ... Partner channel: @cveNotify For ads: https://telega.io/c/malwr
Ko'proq ko'rsatish📈 Telegram kanali Malware News analitikasi
Malware News (@malwr) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 15 396 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 8 316-o'rinni va AQSH mintaqasida 2 465-o'rinni egallagan.
📊 Auditoriya ko‘rsatkichlari va dinamika
невідомо sanasidan buyon loyiha tez o‘sib, 15 396 obunachiga ega bo‘ldi.
21 Iyul, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 712 ga, so‘nggi 24 soatda esa 22 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.
- Tasdiqlash holati: Tasdiqlanmagan
- Jalb etish (ER): Auditoriya o‘rtacha 4.13% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 2.23% ini tashkil etuvchi reaksiyalarni to‘playdi.
- Post qamrovi: Har bir post o‘rtacha 636 marta ko‘riladi; birinchi sutkada odatda 343 ta ko‘rish yig‘iladi.
- Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 1 ta reaksiya keladi.
- Tematik yo‘nalishlar: Kontent threat, kernel, cve-2025, actor, attack kabi asosiy mavzularga jamlangan.
📝 Tavsif va kontent siyosati
Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
“The latest NEWS about malwares, DFIR, hacking, security issues, thoughts and ...
Partner channel: @cveNotify
For ads: https://telega.io/c/malwr”
Yuqori yangilanish chastotasi (oxirgi ma’lumot 22 Iyul, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.
15 396
Obunachilar
+2224 soatlar
+1607 kunlar
+71230 kunlar
Ma'lumot yuklanmoqda...
O'xshash kanallar
Taglar buluti
Kirish va chiqish esdaliklari
---
---
---
---
---
---
Obunachilarni jalb qilish
Iyul '26
Iyul '26
+518
1 kanalda
Iyun '26
+700
0 kanalda
Get PRO
May '26
+637
0 kanalda
Get PRO
Aprel '26
+476
1 kanalda
Get PRO
Mart '26
+257
0 kanalda
Get PRO
Fevral '26
+324
1 kanalda
Get PRO
Yanvar '26
+348
0 kanalda
Get PRO
Dekabr '25
+397
0 kanalda
Get PRO
Noyabr '25
+412
0 kanalda
Get PRO
Oktabr '25
+188
0 kanalda
Get PRO
Sentabr '25
+95
2 kanalda
Get PRO
Avgust '25
+45
0 kanalda
Get PRO
Iyul '25
+51
0 kanalda
Get PRO
Iyun '25
+46
1 kanalda
Get PRO
May '25
+31
1 kanalda
Get PRO
Aprel '25
+56
0 kanalda
Get PRO
Mart '25
+22
0 kanalda
Get PRO
Fevral '25
+36
0 kanalda
Get PRO
Yanvar '25
+34
1 kanalda
Get PRO
Dekabr '24
+457
0 kanalda
Get PRO
Noyabr '24
+1 858
3 kanalda
Get PRO
Oktabr '24
+980
0 kanalda
Get PRO
Sentabr '24
+1 070
1 kanalda
Get PRO
Avgust '24
+957
2 kanalda
Get PRO
Iyul '24
+611
1 kanalda
Get PRO
Iyun '24
+483
0 kanalda
Get PRO
May '24
+637
0 kanalda
Get PRO
Aprel '24
+640
1 kanalda
Get PRO
Mart '24
+806
2 kanalda
Get PRO
Fevral '24
+521
1 kanalda
Get PRO
Yanvar '24
+293
0 kanalda
Get PRO
Dekabr '23
+361
2 kanalda
Get PRO
Noyabr '23
+85
2 kanalda
Get PRO
Oktabr '23
+86
1 kanalda
Get PRO
Sentabr '23
+97
0 kanalda
Get PRO
Avgust '23
+85
0 kanalda
Get PRO
Iyul '23
+63
0 kanalda
Get PRO
Iyun '23
+77
0 kanalda
Get PRO
May '23
+65
0 kanalda
Get PRO
Aprel '23
+75
0 kanalda
Get PRO
Mart '23
+75
0 kanalda
Get PRO
Fevral '23
+38
0 kanalda
Get PRO
Yanvar '23
+63
0 kanalda
Get PRO
Dekabr '22
+99
0 kanalda
Get PRO
Noyabr '22
+70
0 kanalda
Get PRO
Oktabr '22
+101
0 kanalda
Get PRO
Sentabr '22
+165
0 kanalda
Get PRO
Avgust '22
+986
0 kanalda
Get PRO
Iyul '22
+27
0 kanalda
Get PRO
Iyun '22
+31
0 kanalda
Get PRO
May '22
+63
0 kanalda
Get PRO
Aprel '22
+72
0 kanalda
Get PRO
Mart '22
+74
0 kanalda
Get PRO
Fevral '22
+43
0 kanalda
Get PRO
Yanvar '22
+112
0 kanalda
Get PRO
Dekabr '21
+99
0 kanalda
Get PRO
Noyabr '21
+42
0 kanalda
Get PRO
Oktabr '21
+34
0 kanalda
Get PRO
Sentabr '21
+36
0 kanalda
Get PRO
Avgust '21
+48
0 kanalda
Get PRO
Iyul '21
+95
0 kanalda
Get PRO
Iyun '21
+77
0 kanalda
Get PRO
May '21
+11
0 kanalda
Get PRO
Aprel '21
+39
0 kanalda
Get PRO
Mart '21
+28
0 kanalda
Get PRO
Fevral '21
+40
0 kanalda
Get PRO
Yanvar '21
+54
0 kanalda
Get PRO
Dekabr '20
+938
0 kanalda
| Sana | Obunachilarni jalb qilish | Esdaliklar | Kanallar | |
| 22 Iyul | +14 | |||
| 21 Iyul | +23 | |||
| 20 Iyul | +18 | |||
| 19 Iyul | +20 | |||
| 18 Iyul | +35 | |||
| 17 Iyul | +24 | |||
| 16 Iyul | +11 | |||
| 15 Iyul | +37 | |||
| 14 Iyul | +37 | |||
| 13 Iyul | +38 | |||
| 12 Iyul | +16 | |||
| 11 Iyul | +18 | |||
| 10 Iyul | +21 | |||
| 09 Iyul | +27 | |||
| 08 Iyul | +8 | |||
| 07 Iyul | +20 | |||
| 06 Iyul | +25 | |||
| 05 Iyul | +30 | |||
| 04 Iyul | +16 | |||
| 03 Iyul | +31 | |||
| 02 Iyul | +29 | |||
| 01 Iyul | +20 |
Kanal postlari
| 2 | Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding
https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding
🎖@malwr | 621 |
| 3 | cookiengineer/godecompose: :construction: Experimental pattern-based decompiler for Go :construction:
https://github.com/cookiengineer/godecompose
Pattern-based decompiler for Go binaries. Recovers original Go source code by matching known compiler output patterns against disassembled machine code.
🎖@malwr | 693 |
| 4 | Pixels to Payload: Dissecting a Four-Stage Bitmap-Steganography Dropper Delivering AsyncRAT
A technical teardown of a multi-stage .NET dropper chain that hides its loaders inside bitmap pixel channels, wraps an Eazfuscator crypter around an academic epidemiology simulator, and delivers AsyncRAT 0.5.8. Includes pixelchain, a keyless end-to-end chain extractor.
https://blog.threatuniverse.co.uk/posts/asyncrat-bitmap-steganography-dropper/
🎖@malwr | 687 |
| 5 | From Alert to Core Dump: Hunting Zeus Malware Using Suricata, Splunk, YARA, and Volatility
Malware analysis and threat hunting are critical skills for any modern SOC Analyst. To truly understand how adversaries operate, we must…
https://medium.com/@osamamamoussa/from-alert-to-core-dump-hunting-zeus-malware-using-suricata-splunk-yara-and-volatility-4ce18f517f87?sharedUserId=osamamamoussa
🎖@malwr | 621 |
| 6 | helixmap/sigwood: Local-first, transparent threat hunting for the logs you already have: Zeek, Pi-hole, syslog, CloudTrail. Named technique behind every finding. No SIEM, no agent, no black box.
https://github.com/helixmap/sigwood
🎖@malwr | 607 |
| 7 | Windows AppResolver LPE: From AppContainer to SYSTEM
Exploit development for a Windows AppResolver authorization issue fixed in July 2026, from a zero-capability AppContainer to an interactive SYSTEM shell.
https://davidcarliez.github.io/blog/windows-appresolver-lpe-to-system/
🎖@malwr | 548 |
| 8 | OkoBot framework infection chain
Kaspersky GReAT experts dissect the new OkoBot campaign targeting cryptocurrency users. This complex framework employs TookPS, exfiltrates seed phrases, monitors Chromium-based browsers, and installs various malware strains, including the Rilide stealer.
https://securelist.com/okobot-framework-targets-cryptocurrency-wallets/120660/
🎖@malwr | 669 |
| 9 | UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
Cisco Talos is disclosing UAT-11795, a sophisticated, Russian-speaking, financially motivated adversary that has been conducting a malicious campaign targeting users in the U.S. and Europe since at least June 2025.
https://blog.talosintelligence.com/uat-11795-deploys-novel-starland-rat-and-bespoke-wldr-c2-implant-in-financially-motivated-campaign/
🎖@malwr | 736 |
| 10 | IDA 9.4 | Hex-Rays Docs
https://docs.hex-rays.com/release-notes/9_4
🎖@malwr | 622 |
| 11 | Schich/Lucky-Spark: A stealthy stager designed for shellcode payloads staged with http/https like Sliver, or on github raw.
https://github.com/Schich/Lucky-Spark
🎖@malwr | 629 |
| 12 | ProfessorQuantumUniverse/Veto: A nice Virus Total Android Client.
https://github.com/ProfessorQuantumUniverse/Veto
🎖@malwr | 536 |
| 13 | One Man, One AI, One Fake Persona: Inside the 5-Year Influence and Fraud ‘Patriot Bait’ Campaign
A solo Russian-speaking threat actor ran a 5-year Telegram channel and, starting September 2025, used AI to automate its content, credential theft, and a cryptocurrency fraud scheme targeting American audiences.
https://www.trendmicro.com/en_us/research/26/e/inside-the-influence-and-fraud-patriot-bait-campaign.html
🎖@malwr | 456 |
| 14 | endgamec2framework/endgame: ENDGAME C2 FRAMEWORK — AI-powered command and control for professional red team operations
https://github.com/endgamec2framework/endgame
🎖@malwr | 421 |
| 15 | 2026-06-01: SmartApeSG ClickFix --> Unidentified RAT
https://www.malware-traffic-analysis.net/2026/06/01/index.html
🎖@malwr | 392 |
| 16 | 2026-06-22: SHub Stealer infection (macOS)
https://www.malware-traffic-analysis.net/2026/06/22/index.html
🎖@malwr | 429 |
| 17 | Anatomy of a CUDA Binary
When you compile a CUDA kernel, the final artifact is a cubin — a CUDA binary. It is a standard ELF64 file with NVIDIA-specific sections that encode everything the CUDA driver needs to load and launch a kernel: the machine code, the parameter layout, register allocation metadata, and a collection of attributes that have no public documentation.
https://hiraditya.github.io/posts/anatomy-of-a-cuda-binary/
🎖@malwr | 474 |
| 18 | Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries
An exposed open directory revealed a suspected Chinese campaign using Claude Code and DeepSeek-v4-pro to breach government systems in Afghanistan, Thailand, and Taiwan, with parallel probing of financial services worldwide.
https://hunt.io/blog/chinese-operators-claude-deepseek-government-intrusion
🎖@malwr | 424 |
| 19 | Bind Link Abuse: One Windows Feature, Many Ways to Blind Your EDR
I’d like to thank my coauthors, Andrei-Marius Muntea, Andrei Mermeze, Radu-Marian Portase, and Vlad Lazar, for their invaluable contributions to this research.
https://www.bitdefender.com/en-us/blog/businessinsights/bind-link-abuses-windows-feature-edr-evasion-technique
🎖@malwr | 437 |
| 20 | TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development
TuxBot v3 Evolution, an IoT botnet framework built with LLMs. Read our analysis of its cross-compiled binaries, C2 architecture and bugs.
https://unit42.paloaltonetworks.com/tuxbot-v3-evolution-iot-botnet/
🎖@malwr | 496 |
