Tag

#malware

414 posts66 followers

Explore Hashnode

Alternatives

Mahir Faysal5m ago · 18 min read

How to Use VirusTotal to Check Files, Links and Downloads (Step-by-Step for Beginners)

To use VirusTotal, open virustotal.com and pick one of three tabs: File to upload something you've downloaded, URL to check a link, or Search to look up a file hash, domain or IP address. The safest h

mfaysaldev.hashnode.dev

404 Founders7h ago · 10 min read

Aoki Infostealer Steals Claude, Codex and Cursor Tokens

The Aoki infostealer, also tracked as Aokigahara, has added AI coding assistant credentials to its shopping list. It takes the login and session files of Claude Code, OpenAI Codex, Cursor, GitHub Copi

404-founders.com

Max3d ago · 11 min read

NPM Is Totally Compromised. How Do You Run `npm install` Safely Now?

A malicious release can turn up in a library you’ve used for years, caught in a chain of compromises spreading through other packages. September and October 2026 alone gave us plenty of examples: Sub

1 blog.reforma.ai

Huzaifa Khan4d ago · 8 min read

Malware was force-pushed into my GitHub repos. Here’s how I found it and undid it

On a Thursday morning, a routine git fetch printed two words that didn't belong: + a500ecd...aaf1a3e main -> origin/main (forced update) I hadn't force-pushed anything. Someone had replaced t

itshuzaifa.hashnode.dev

Sixtus SphereOct 14 · 7 min read

The CAPTCHA That Tricks You Into Hacking Your Own Computer

Early in 2026, hotel staff working with Booking.com saw something that looked completely normal: a security check. "Verify you're not a robot," it said. They clicked. They followed three quick steps.

sixtusphere.hashnode.dev

404 FoundersOct 7 · 4 min read

The WordPress Malware That Rebuilds Itself From Memory

Sucuri documented an SC-family backdoor that persists across files, the database, scheduled tasks, and System V shared memory Sucuri security analyst Gabriel Barbosa published the primary analysis on

404-founders.com

Kaminari AdOct 3 · 7 min read

DarkSword in the ad stack: an iOS exploit chain delivered as malvertising

Originally published on the Kaminari Ad blog. Kaminari Ad is an ad quality and security platform for publishers and ad networks — this kit is what its malvertising protection now flags on every scan.

kaminari-research.hashnode.dev

Budget EngineerOct 1 · 18 min read

Session Stealers Don't Hack You. They Become You.

Oct 1, 2026 · @Budget Engineer I got hit by an infostealer/session stealer. And it started with the most boring sentence in tech: "hmm, my PC's acting a bit funny." I still don't know how it got in. I

blog.budget-engineer.com

Tech Skill SchoolOct 1 · 5 min read

Cyber Pulse Monthly — September 2026

1. Cisco Secure Email Gateway Zero-Day Exploited to Gain Root Access Cisco warned that attackers were exploiting a critical zero-day in Secure Email Gateway appliances. Tracked as CVE-2026-76461, the

techskillschool.hashnode.dev

404 FoundersSep 28 · 7 min read

Operation RapidRust: APT36 Hid Its C2 Inside GitHub

The Pakistani intelligence-linked hacking group APT36 spent August 2026 quietly running four new malware families against Indian and Afghan government networks. The command-and-control infrastructure

404-founders.com

Search Hashnode

Explore Hashnode

Trending tags this week

How to Use VirusTotal to Check Files, Links and Downloads (Step-by-Step for Beginners)

Aoki Infostealer Steals Claude, Codex and Cursor Tokens

NPM Is Totally Compromised. How Do You Run `npm install` Safely Now?

Malware was force-pushed into my GitHub repos. Here’s how I found it and undid it

The CAPTCHA That Tricks You Into Hacking Your Own Computer

The WordPress Malware That Rebuilds Itself From Memory

DarkSword in the ad stack: an iOS exploit chain delivered as malvertising

Session Stealers Don't Hack You. They Become You.

Cyber Pulse Monthly — September 2026

Operation RapidRust: APT36 Hid Its C2 Inside GitHub