SecuriTricks

New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms

As artificial intelligence (AI) surges into mainstream adoption, millions of users turn daily to AI-powered tools for content creation—from generating art and music to transforming photos into videos. But amid this excitement, cybercriminals have uncovered a potent new lure: fake AI platforms promi…

xworm

python

Published: May 12, 2025

Downloadable IOCs: 32

Outlaw Linux Malware: Persistent, Unsophisticated, and Surprisingly Effective

OUTLAW is a persistent Linux malware that uses basic techniques like SSH brute-forcing, SSH key manipulation, and cron-based persistence to maintain a long-lasting botnet. Despite its lack of sophistication, it remains active by leveraging simple but impactful tactics. The malware deploys modified …

cryptocurrency mining

Published: April 3, 2025

Downloadable IOCs: 87

BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks

The BlackByte ransomware group continues leveraging established tactics and vulnerable drivers to bypass security controls, while also incorporating newly disclosed vulnerabilities and using stolen credentials for propagation. A new iteration of their encryptor appends the 'blackbytent_h' extension…

Published: August 28, 2024

Downloadable IOCs: 4

From Dormant to Dangerous: P2Pinfect Evolves to Deploy New Ransomware and Cryptominer

P2Pinfect is a sophisticated malware that utilizes a peer-to-peer botnet for command and control. Initially appearing dormant, it has evolved to deploy ransomware and cryptominer payloads. The malware spreads via exploiting Redis and limited SSH capabilities. A recent update introduced a new ransom…

Published: June 27, 2024

Downloadable IOCs: 15

Tag: worm

Attack reports

New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms

Outlaw Linux Malware: Persistent, Unsophisticated, and Surprisingly Effective

BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks

From Dormant to Dangerous: P2Pinfect Evolves to Deploy New Ransomware and Cryptominer