The Koske Linux malware shows how cybercriminals can use AI for payload development, persistence, and adaptivity.
The post Sophisticated Koske Linux Malware Developed With AI Aid appeared first on SecurityWeek.
Prometei Botnet Activity Spikes
Palo Alto Networks has observed a spike in Prometei activity since March 2025, pointing to a resurgence of the botnet.
The post Prometei Botnet Activity Spikes appeared first on SecurityWeek.
Albabat Ransomware Expands Targets, Abuses GitHub
New versions of the Albabat ransomware target Windows, Linux, and macOS, and retrieve configuration files from GitHub.
The post Albabat Ransomware Expands Targets, Abuses GitHub appeared first on SecurityWeek.
New ‘Auto-Color’ Linux Malware Targets North America, Asia
New Linux malware named Auto-Color, which allows full remote access to compromised devices, targets North America and Asia.
The post New ‘Auto-Color’ Linux Malware Targets North America, Asia appeared first on SecurityWeek.
New ‘Hadooken’ Linux Malware Targets WebLogic Servers
The recently observed Hadooken malware targeting Oracle WebLogic applications is linked to multiple ransomware families.
The post New ‘Hadooken’ Linux Malware Targets WebLogic Servers appeared first on SecurityWeek.
400,000 Linux Servers Hit by Ebury Botnet
The Ebury Linux botnet has ensnared over 400,000 Linux systems in 15 years, with roughly 100,000 still infected.
The post 400,000 Linux Servers Hit by Ebury Botnet appeared first on SecurityWeek.
Magnet Goblin Delivers Linux Malware Using One-Day Vulnerabilities
The financially motivated threat actor Magnet Goblin is targeting one-day vulnerabilities to deploy Nerbian malware on Linux systems.
The post Magnet Goblin Delivers Linux Malware Using One-Day Vulnerabilities appeared first on SecurityWeek.
Linux Malware Campaign Targets Misconfigured Cloud Servers
A new malware campaign has been observed targeting misconfigured Apache Hadoop, Confluence, Docker, and Redis instances.
The post Linux Malware Campaign Targets Misconfigured Cloud Servers appeared first on SecurityWeek.