Malware sneaks onto Steam, for the third time in 2025
Hey, Valve. I know y’all are busy banning porn games and not making a new Steam Deck design. But is everything okay over there? I ask because, for the third time in 2025, someone’s been…
Malware
Gaming mouse maker hosted malware on download page
For me, the biggest difference between a “gaming” mouse or keyboard and a regular one is the software. Gaming accessories need a lot more customization options, and preferably a tool that lets you change settings…
Hackers exploit a blind spot by hiding malware inside DNS records
Hackers are stashing malware in a place that’s largely out of the reach of most defenses—inside domain name system (DNS) records that map domain names to their corresponding numerical IP addresses. The practice allows malicious…
AI malware could beat Microsoft Defender up to 8 percent of the time
Generative “AI” isn’t just useful for stealing from artists and writers—it’s also giving malware a boost in its ability to iterate and spread. According to hackers at this year’s upcoming Black Hat conference, some of…
High-tech Mac malware hides itself in fake Zoom update
SentinelLabs has posted a report about a new malware that targets Mac users of blockchain technologies, such as crypto. The threat agents behind the attack are based in North Korea, according to research by Huntabil.IT,…
Update WinRAR now! This security flaw leaves your PC exposed to malware
If you’re still using WinRAR, you should update to version 7.12 as soon as possible. A vulnerability labeled CVE-2025-6218 was recently discovered in older versions of the popular Windows file compression tool. The security vulnerability…
New Android malware adds fake contacts to make scam calls look legit
At this point, I get so many spam calls that my blood pressure rises when numbers show up on my phone’s call screen. A new piece of Android malware seems to be designed around that…
Destructive malware available in NPM repo went unnoticed for 2 years
Some of the payloads were limited to detonate only on specific dates in 2023, but in some cases a phase that was scheduled to begin in July of that year was given no termination date.…
Microsoft says Lumma password stealer malware found on 394,000 Windows PCs
Microsoft and law enforcement have announced a court-authorized takedown of Lumma, a prolific info-stealer malware operation found on more than 394,000 Windows PCs globally, mostly in Brazil, Europe, and the United States. The tech giant…
FBI and Dutch police seize and shut down botnet of hacked routers
A joint international law enforcement action shut down two services accused of providing a botnet of hacked internet-connected devices, including routers, to cybercriminals. U.S. prosecutors also indicted four people accused of hacking into the devices…