Security Affairs Malware Newsletter Round 111

Malware Newsletter Akira Hits Safe Mode: Ransomware Rebooting Around EDR Multi-Functional Linux Botnet “Evooo1Bot” StubMaker RubyGems Campaign Delivers a Windows Infostealer Hunting MacSync Stealer infrastructure through behavioral pivots Manic: Blend between Banking Malware & Spyware Clop Returns with Custom Implant in Mass-Extortion Campaign The ToxicPanda Never Sleeps: ToxicPanda 2.0 Prepares its Next Strike on Mobile Striking gold: Inside the GoldDigger Android malware SilkParasite: Tracking a China-Nexus APT Across Central Asia Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant The invisible passenger in your car Malware Crypting Services and the Threat Actors Who Sell Them Grandoreiro goes north: From Brazil to Mexico with a new DLL sideloading campaign Survival of~the~Stealthiest: Evolving Low-Entropy Ransomware via~Genetic Algorithms Malformer: A Multi-Modal Malware Detector Using Transformers Follow me on Twitter: @securityaffairs and Facebook and Mastodon (SecurityAffairs – hacking, newsletter)