Tag: multistage malware

2 Attack Reports | 0 Vulnerabilities

Attack reports

Watering Hole Attack Targets EmEditor Users With Information-Stealing Malware

A compromised EmEditor installer was used in a software supply chain attack to deliver multistage malware. The attack, discovered in late December 2025, targeted users of this widely-used text editor. The malware performs credential theft, data exfiltration, and enables lateral movement. It uses ob…

information stealing

software supply chain

multistage malware

Published: January 23, 2026

Downloadable IOCs: 3

Clone, Compile, Compromise: Open-Source Malware Trap on GitHub

A newly identified threat actor, Water Curse, is exploiting GitHub to deliver weaponized repositories containing multistage malware. The group has been linked to at least 76 GitHub accounts, targeting cybersecurity professionals, game developers, and DevOps teams. Their malware enables data exfiltr…

privilege escalation

data exfiltration

backdoor.js.dullrat

multistage malware

Published: June 16, 2025

Downloadable IOCs: 0

Click here to see more Attack Reports