Malware
Also called: malicious software
Any software, firmware or code intentionally designed to cause harm, including ransomware, trojans, worms, backdoors and infostealers. Advisories about malware usually include indicators such as file hashes, domains and IP addresses; load them into your EDR or antivirus and search logs to check whether any internal host is already infected.
Further reading: csrc.nist.gov
Advisories that mention this term
German drone maker Quantum Systems hit by cyberattack; Bundeswehr grounding lifted, report says QBase update carried malware
The Register reports Quantum Systems said it spotted a cyberattack at the end of October, reported it to authorities and contained it, and that the Bundeswehr is flying its drones again after a precautionary grounding .
"wfx-loot" campaign abuses 4,800+ hijacked GitHub accounts to plant CI secret stealer; credentials exfiltrated from at least 1,835 repositories
Aikido says that since November 10 an attacker has used stolen GitHub credentials across 4,837 compromised accounts to open probe pull requests in 61,764 repositories, and at least 1,835 repositories ran the payload and had GitHub Actions secrets and cloud credentials stolen .
Cyberattack knocks Brazil's Santos Port Authority admin systems offline for nearly a week; Federal Police investigate, port security level raised
Tecnologística reports that Brazil's Santos Port Authority (APS) said it identified a cyberattack as systems restarted after a November 6 power outage, which compromised its files and took administrative systems offline; by November 12 it had recovered about 70% of affected files from backups, and ship movements and land access remain normal .
Ethersphere release pipeline hijacked: bee-js 13.3.0 and Swarm Desktop 0.56.2 laced with wallet-key-stealing malware
Ethersphere maintainers said on GitHub that Swarm Desktop 0.
Russian cloud provider Beget's management layer breached and hit with data-wiping malware; cloud data lost and infrastructure rebuilt from scratch
BleepingComputer reports that Russian cloud and hosting provider Beget said an attacker gained access to the management systems of its entire architecture on the night of Nov 1 and deployed malware that erased server data, after which Beget disconnected all servers .