MalwareTips

Cybersecurity community (est. 2009) offering free malware removal guides, tech news, scam alerts, help forums, & security resources.

[Petrovic @petrovic082]

#malware #repo
hxxps://github.com/bytecategory?tab=repositories

[OpenClaw🦞 @openclaw]

🦞🛡️ OpenClaw × VirusTotal: every ClawHub skill now auto-scanned for malware

🔍 AI Code Insight catches reverse shells, crypto miners & exfiltration
⚡ ~30s verdicts
🚦 Benign/Suspicious/Malicious tiers
🔄 Daily re-scans

This is not a silver bullet, but it is another layer to the shell 🦞https://t.co/2HmT6Ubrdm

[Pirat_Nation 🔴 @Pirat_Nation]

Microsoft acknowledges that some PCs cannot boot after the latest Windows 11 update

Affected systems fail to boot, often showing errors like the UNMOUNTABLE_BOOT_VOLUME stop code (blue screen), black screen of death

[LaurieWired @lauriewired]

pdfs sometimes open up calculators to help u with the math

[Smukx.E @5mukx]

Analysis of LockBit ransomware - version 4.0.

https://t.co/JhbgWorNeS

[SSD Secure Disclosure @SecuriTeam_SSD]

🚨 New advisory was just published!

A Remote Code Execution chain was discovered leveraging two severe V8 engine vulnerabilities in Google Chrome.

Disclosed by Seunghyun Lee (@0x10n), winning first place in the Chrome RCE category at TyphoonPWN 2025.

[Pirat_Nation 🔴 @Pirat_Nation]

Google says hackers are turning public blockchains into unkillable malware safehouses

Hackers aligned with North Korea are using public cryptocurrency blockchains to conceal and distribute malicious code, adopting a technique researchers describe as a new form of untouchable online hosting.

[The Hacker News @TheHackersNews]

🔥 Apple just gave the iPhone 17 a built-in shield against hackers.

A new feature called Memory Integrity Enforcement blocks the very exploits spyware depends on—buffer overflows, use-after-free bugs—without slowing performance.

🔒 This could be Apple’s biggest security upgrade in years.

Full story → https://t.co/Y2N4Pl13BO

[Adlice @AdliceSoftware]

Are you regular user of our products ? Help us increasing our score on #TrustPilot !
https://t.co/nFPHxQC1A1

[Gen @GenDigitalInc]

A rare leak just pulled back the curtain on LockBit, one of the world’s most dangerous ransomware gangs.

Think affiliate onboarding, revenue splits, even support desks. It’s not just crime. It’s a criminal business model.

🔍 Read more: https://t.co/MqBPYim6uC

[SquareX @getsquarex]

SquareX is here to put a stop to that—providing real-time protection to keep your data and privacy secure.

Read the ongoing discussion at: https://t.co/3CB9OH5csN (@MalwareTipscom)

[Coffeezilla @coffeebreak_YT]

MrBeast crypto investigation is LIVE for Patrons early.
Been looking into this for a while and talking to everyone I can. It's a complex story, with a lot of finger-pointing and unanswered questions.

[SC Media @SCMagazine]

Chinese threat actor Storm-0940 has been stealing credentials from @Microsoft customers by leveraging the Quad7 botnet to launch highly evasive password spray attacks on a broad cross-section of organizations in Europe and North America. #cybersecurity https://t.co/NDnOys8EIB

[Malwarebytes @Malwarebytes]

Rewards programs can be a great way to save money, but require you to share your personal information, potentially putting your data at risk.

How many rewards programs have you signed up for?

[Gen Threat Labs @GenThreatLabs]

🚨 Interesting #FakeCaptcha technique alert! Attackers are using mshta commands formatted to show only harmless text like 'Verify you are human' in the Windows Run Dialog, hiding the malicious part. They also extended their #impersonation portfolio with @Cloudflare CAPTCHA design. Remember, real CAPTCHAs won't ask you to use PowerShell or Run prompts. Stay vigilant! 💻🔒

IoCs:
mshta https://dovip[.]win/verify/recaptcha-verify # ✅ ''I am not a robot - reCAPTCHA Verification ID: 6438''

mshta https://webdemo[.]biz/Ray-verify.html # ✅ ''Verify you are human - Ray Verification ID: 146820 ''

[BleepingComputer @BleepinComputer]

Avast releases free decryptor for DoNex ransomware and past variants - @billtoulas
https://t.co/piBOz4Uywd

https://t.co/piBOz4Uywd

[Karsten Hahn @struppigel]

Article: "GoTo Meeting loads Remcos RAT via Rust Shellcode Loader"

#GDATA #Techblog #Remcos #RustShLoader
https://t.co/O3psdLdRPe

[Karsten Hahn @struppigel]

YT Short: Can PDFs be Malware? 🦔📹

#MalwareAnalysisForHedgehogs #PDFs
https://t.co/HF1DfBw0Zv

[Karsten Hahn @struppigel]

New Video: Why malware simulators cannot tell you if a malware or technique is detected by AV🦔📹

(... unless they were specifically made for that product)

#MalwareAnalysisForHedgehogs
https://t.co/KnzU0zdNtH

[MalwareTips @MalwareTipscom]

The leaked database contains names, phone numbers, emails, Facebook IDs and profile info. Threat actors could use this in phishing and SIM swap attacks.

[MalwareTips @MalwareTipscom]

A threat actor leaked 200,000 records containing personal information of Facebook Marketplace users. The data was allegedly stolen from a Meta contractor by a hacker called 'algoatson'.