Fake Claude Code Installers Deliver Credential-Stealing Malware

Fake Claude Code install sites are pushing malware that steals API keys, developer credentials, crypto wallets, and other sensitive data.
IEEE Spectrum on MSN

Vibecoded malware is flooding the internet

“Vibeware” is forcing new anti-malware strategies ...
TechCrunch

This is what some of the world’s largest banks of malware look like stacked as hard drives

Malware research group vx-underground, which says it has the largest collection of malware source code, said in a post on X that its archive of data amounts to about 30 terabytes. A reply by Bernardo ...

Megalodon cyberattack infects 5,500 GitHub open-source repositories with malware, researchers say

Security researchers say 5,500 GitHub repositories have been affected by the attack.
Android

ERMAC Exposed: The Android Malware Targeting 700+ Apps

The source code for the ERMAC 3.0 Android banking trojan has been leaked online, exposing the malware’s full infrastructure and its ability to target over 700 apps. While this is a win for ...
The Hacker News

North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels

Proofpoint says UNK_DeadDrop sent 250+ phishing emails to nearly 100 firms, using GitHub and VS Code lures to steal credentials and wallet data.
Dark Reading

Complex VoidLink Linux Malware Created by AI

An advanced cloud-first malware framework targeting Linux systems was created almost entirely by artificial intelligence (AI), a move that signals significant evolution in the use of the technology to ...
CoinTelegraph

Google Threat Intel flags 'Ghostblade' crypto-stealing malware

Ghostblade is one of six malware tools in the "DarkSword" suite of malicious software designed to steal crypto private keys and user data. Google Threat Intelligence has identified a new form of ...
Memeburn

Microsoft Open-Source Tools Hacked to Steal AI Developers’ Passwords

Microsoft GitHub hack hit open-source AI tools, exposing developer passwords and cloud credentials. Here’s why SA tech teams ...
Bleeping Computer

WinRAR zero-day exploited to plant malware on archive extraction

A recently fixed WinRAR vulnerability tracked as CVE-2025-8088 was exploited as a zero-day in phishing attacks to install the RomCom malware. The flaw is a directory traversal vulnerability that was ...
TechCrunch

North Korean hackers blamed for hijacking popular Axios open source project to spread malware

A suspected North Korean hacker has hijacked and modified a popular open source software development tool to deliver malware that could put millions of developers at risk of being compromised. On ...