The Ultimate Guide to Malware
A curated American edition of TechDay news, analysis, interviews, reviews, job moves, and related resources for Malware.
What to know about Malware
Malware represents a broad category of malicious software designed to infiltrate, damage, or disrupt computer systems and networks. From ransomware that locks users out of their data to spyware that quietly steals information, malware continues to evolve in sophistication and reach. Our recent stories cover a wide range of malware threats impacting individuals, businesses, and critical infrastructure, illustrating the diverse strategies cybercriminals use to exploit vulnerabilities.
Delving into these stories provides readers with insights into how malware campaigns operate, the latest trends in attack vectors, and expert advice on defense mechanisms. Understanding malware not only alerts individuals and organisations to potential risks but also guides them in strengthening their digital security posture. Stay informed about the ever-changing malware landscape to better safeguard your data and systems from emerging cyber threats.
American Malware News
Regional stories with direct local relevance
AI now powers most dangerous cyber threats, warns SANS
Defenders face faster, harder-to-stop attacks as SANS says AI is now built into phishing, malware and reconnaissance at scale.
Ransomware hits record high as Qilin tops threat list
Ransomware attacks hit record highs in 2025 as Qilin overtakes LockBit, with victim numbers surging 58% and threat groups multiplying.
Major vendors admit browser attacks bypass secure gateways
Major SASE vendors admit Secure Web Gateways cannot block Last Mile Reassembly attacks, which let malware bypass defences by assembling inside browsers.
Cybersecurity on alert as Iran shifts to disruptive digital attacks
Iranian cyber attacks shift towards causing disruption and political damage following Israeli strikes, raising cybersecurity alarms.
US charges Russian in Qakbot cybercrime, seizes USD $24m
The US has charged Russian Rustam Gallyamov for running the Qakbot malware network, seizing USD $24m in cryptocurrency from cybercrime activities.
Qilin ransomware attack hits sheriff, $48K spent on recovery
Ransomware gang Qilin claimed an April 2025 attack on Tennessee's Hamilton County Sheriff's Office, demanding USD $300,000, with no ransom paid.
Analyst Insights
Research and market analysis connected to Malware
Group-IB named a Leader in Gartner cyberthreat report
Check Point tops Miercom hybrid mesh security benchmark
ManageEngine adds EDR & Zero Trust access to platform
ManageEngine adds EDR & zero trust to Endpoint Central
Acronis boosts MSP security with new threat research
Expert Columns
The Death of the Firewall
One click can trigger a breach, but security can stop it
Is the USB making a comeback?
Account Takeover (ATO) fraud: The hidden threat to your business and how to stop it
Securing the digital classroom: A layered cybersecurity approach for K-12 schools
Solving the '3 AM Problem' with 24/7 cyber defence
SonicWall firewalls strengthen security for IoT era
SonicWall pushes unified automation for faster cyber defence
How identity verification could have stopped a $300M Crypto scam
Infostealer attacks: How hackers steal data from companies
Interviews
Interviews and video coverage from the network
Recent Malware News
FBI warns of rising threat from Medusa ransomware group
Concerns grow over the Medusa ransomware group's threats to critical infrastructure, with attacks on over 300 victims reported amidst escalating cybersecurity risks.
Microsoft & Fortra's joint fight against Cobalt Strike abuse
Microsoft, Fortra, and Health ISAC unite against cybercrime, significantly reducing Cobalt Strike misuse by 80% through international cooperation and proactive strategies.
BlackFog says only one in nine ransomware attacks go public
Undisclosed attacks outnumbered public cases by nine to one, with healthcare and government still bearing the brunt of the ransomware threat.
PropellerAds flags cloaking in 2026 ad safety report
Cloaking drove 68.1% of account suspensions in the quarter, showing how fraudsters are hiding banned ads from moderators on the platform.
Microsoft tops phishing brand rankings in first quarter
Phishing campaigns are increasingly targeting credentials, payments and malware delivery, with Microsoft alone accounting for 22% of brand impersonation attempts.
Identity stays top attack surface as threats broaden
Broader attacker activity is increasingly moving beyond stolen credentials, even as identity still accounted for 58.7% of incidents in Q1 2026.
Celebrity stalkerware leak exposes private messages online
A misconfigured database left 86,859 images and private chats from a prominent European celebrity’s device open to anyone online.
Fortinet warns ransomware victims rise 389% amid AI
Ransomware attacks are spreading faster as AI helps criminals exploit flaws within 24 to 48 hours, the report says.
Bitdefender warns journalists on phishing & source safety
Reporters face rising risks from phishing, spyware and device compromise as Bitdefender urges tighter source protection and account security.
Everywhen issues six checks to spot unsafe websites
Businesses and shoppers are being urged to spot fake sites before clicking, as phishing pages and scam shops fuel rising fraud losses.
Cyber attacks on universities rise 63% around the world
Data breaches and hacktivism are driving a sharper threat mix, with universities hit 425 times across 67 countries in a year.
Team Cymru launches Total Insights Feeds for threat data
It aims to replace fragmented feeds by combining risk scoring and context on millions of IPs and domains for security teams.
VIPRE launches cybersecurity training for students
Schools can now plug age-specific lessons into classrooms as VIPRE’s new training tackles phishing, bullying and AI impersonation threats.
CIOs rank AI as a growing cyber risk, survey finds
Fewer than half of firms have the safeguards to track staff AI use, even as 77% reported a cyber incident in the past year.
Orca Security flags AI secrets & supply chain gaps
Leaked AI credentials and unpatched dependencies are leaving production systems exposed across US and European organisations, Orca Security said.
Attackers turn trusted tools into cyber weapon
Trusted software and identity sessions are now prime attack paths, with ClickFix linked to more than 44% of defence evasion incidents.
Malware surge in open source software alarms firms
Organisations remain exposed as malware in open-source packages surged in 2025, with most advisories and account takeovers reported last year.
Zscaler flags Xloader malware's tougher obfuscation
ThreatLabz says the latest Xloader strain uses layered encryption and decoy servers to frustrate analysts while stealing browser credentials.
DeepLoad malware steals credentials via ClickFix campaign
Businesses face credential theft and reinfection risks as DeepLoad hides inside trusted Windows processes and evades routine clean-up.
Ransomware attacks fall as CL0P & The Gentlemen surge
The latest data showed 635 ransomware incidents in February, but CL0P and The Gentlemen rose sharply as the threat landscape shifted.