Malware & Ransomware
PEERSTITCH Implant Hijacks FortiGate Processes via FortiManager Breach
Attackers used a missing-auth flaw and path traversal to deploy memory-resident malware on FortiGate firewalls, stealing configs and credentials.
Malware & Ransomware
Malware & Ransomware coverage from RedTeam Tribune holds 20 articles, 16 of them reference guides. The newest was published on October 16, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include UK National Cyber Security Centre and CISA: Stop Ransomware.
Malware & Ransomware
Malware & Ransomware
NjRAT-Based KGB RAT Sold for $150/Mo Enables Webcam Spy and Credential Theft
A Windows trojan sold on hacking forums for $150 monthly grants attackers webcam access, keylogging and password theft capabilities through a modified NjRAT base.
Malware & Ransomware
Discover-Tech Ads Enable Zero-Click Candiru Spyware on 45 Al Jazeera Devices
Citizen Lab researchers reveal how mercenary spyware infected Al Jazeera devices simply by displaying targeted advertisements, requiring no user interaction.
Malware & Ransomware
GhostBat RAT Captures Fintech Credentials via Spoofed Indian Traffic Challan SMS
Android users in India face credential theft as GhostBat RAT uses fake traffic fines to install malware that steals PINs from dozens of financial apps.
Malware & Ransomware
What Is Extended Detection and Response XDR: How It Unifies Security Data
Extended detection and response correlates signals across endpoints, networks, and clouds to reveal threats that isolated tools miss entirely.
Malware & Ransomware
Who Is Responsible for Activating the Disaster Recovery Plan?
Operational authority for recovery activation rests with a designated individual, not a committee, to prevent paralysis during critical system failures.
Malware & Ransomware
Offline Backups: Real Protection Against Ransomware and Data Loss
Air-gapped storage stops encryption propagation instantly, but physical theft and human error create new vulnerabilities that automated systems cannot fix.
Malware & Ransomware
Macro Security Settings Checklist to Stop Document Exploits
Disabling all macros without exceptions breaks legitimate business workflows, while allowing them without scrutiny exposes endpoints to silent data theft and ransomware deployment.
Malware & Ransomware
Stop Computer Worms: The Network Containment Checklist
Computer worms exploit unpatched vulnerabilities to replicate across networks, making isolation faster and more effective than relying on signature-based detection alone.
Malware & Ransomware
7 PyPI Package Mistakes That Invite Malware Into Your Build
Typosquatting and dependency confusion exploit your trust in open source, turning routine installations into silent backdoors that bypass traditional security controls.
Malware & Ransomware
Spot Keyloggers Early: Warning Signs and Removal Steps
Keyloggers often hide in plain sight, causing subtle input delays and unexpected cursor jumps that most users ignore until data is gone.
Malware & Ransomware
How Attack Surface Reduction Rules Work: Mechanism and Limits
Attack surface reduction rules intercept process creation before execution, blocking threats at the kernel level rather than relying on signature matching after the file lands.
Malware & Ransomware
Point-of-Sale Malware Warning Signs: Detect Skimming Before Payment Data Is Stolen
Point-of-sale malware often hides in plain sight by altering legitimate system processes rather than installing new, obvious programs that trigger standard alerts.
Malware & Ransomware
Dynamic Malware Analysis for Small Teams: Practical Execution
Running suspicious files in isolated environments reveals behavioral threats that static signature scanners consistently miss during early infection stages.
Malware & Ransomware
Detect Screen Locker Ransomware: Signs, Logs, and Blind Spots
Screen lockers often hide in plain sight by mimicking system utilities, making process parentage and memory behavior the only reliable indicators before the lock screen appears.
Malware & Ransomware
Malware Obfuscation FAQs: How Attackers Hide Code and How You Spot It
Obfuscation transforms malicious code into unreadable structures, forcing defenders to rely on behavioral analysis rather than static signature matching to detect threats.
Malware & Ransomware
How Email Attachment Scanning Works: The Hidden Mechanics
Scanning engines often fail to detect threats because they analyze static files rather than observing behavior in isolated, disposable environments.
Malware & Ransomware
Macro Malware Warning Signs You Miss and How to React
Most macro malware hides behind legitimate-looking prompts, tricking users into bypassing security controls through social engineering rather than technical exploits.
Malware & Ransomware
Android Malware Response: Immediate Containment and Recovery Steps
Restoring a factory backup often reinstalls the malicious application, turning your recovery effort into a vector for immediate reinfection if you skip verification.
Malware & Ransomware
XDR Misconfigurations: 7 Common Errors That Blind Your Security Stack
Most extended detection and response failures stem from configuration drift and alert fatigue, not from the software’s inability to detect threats.