Official notice regarding the TF card worm virus found on some ThinkNode M9 units

A WMI subscription named "Realtek" started a 12 KB backdoor at 19:50, and it never exited. It read its C2 domain by counting spaces in a fake desktop.ini, then called a domain its operator stopped paying for in July 2021. It kept trying for 11 months. Read more -> https://t.co/z7SSDdpWAq

A security researcher recently uncovered that Microsoft embeds hidden identifiers into images created by Copilot in Paint and the Photos app.

Is Windows 11 secretly spying on you? A reverse engineer has dug into Microsoft's mysterious performance service to uncover the truth.

When I try to run a scan, it stops and then tells me to restart the service. There are no exclusions and nothing of note from my start up apps....

I am currently dealing with a severe ransomware and Remote Access Trojan (RAT) infection identified as "Pakistanware" (linked to APT36 /...

Most AI courses teach today's tools, but this free Stanford classic by Peter Norvig and Sebastian Thrun dives into the deeper foundational ideas you need to truly understand artificial intelligence.

Posted in r/antivirus by u/No_Dust_2724 • 1 point and 4 comments

Posted in r/antivirus by u/LionRegular1470 • 1 point and 3 comments

ClickFix is evolving into a Malware-as-a-Service ecosystem, enabling large-scale social engineering attacks that bypass antivirus defenses.

The Council imposed restrictive measures on nine individuals and four entities forming part of Russia's cyber ecosystem,  responsible for carrying out, enabling and facilitating malicious cyber a...

ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI Secure Boot by exploiting decade-old vulnerabilities.

New research has found that major purchases, job hunting, and tax time are emerging as prime targets for fraudsters, with younger Australians facing the highest risk despite their digital confidence.

ESET Research analyzes Gamaredon’s new toolset and the group’s growing reliance on legitimate online services to hide its C&C infrastructure and exfiltrate stolen data.

Explore this post and more from the antivirus community

ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced stealthiness.