#FilelessMalware
LightNews LightNews
cyfar.ca
~Kaspersky~
Storm-2603 exploits SharePoint ToolShell CVEs to deploy a fileless in-memory webshell in w3wp.exe, escalating to SYSTEM via EfsPotato and...
-
IOCs: 45[.]91[.]94[.]204, 91[.]224[.]92[.]121, 204[.]76[.]203[.]219
-
#Backdoor #FilelessMalware #Ransomware #ThreatIntel
Link
securelist.com
November 5, 2026 at 12:41 PM
securityonline.bsky.social
Trellix uncovers the Sirius Backdoor in fake FedEx tax invoices. See how the fileless Sirius Backdoor blinds EDRs and survives Windows OS resets.

#SiriusBackdoor #FilelessMalware #Trellix #Phishing #WindowsSecurity #ProcessHollowing #Cybersecurity
Fake FedEx Tax Invoice PDFs Deliver Fileless Sirius Backdoor to Windows Systems
TL;DR The Trellix Threat Response Team uncovered a multistage attack that uses fake FedEx tax invoices in Korean to deploy the Sirius Backdoor. Inside an attached ZIP archive, a blank PDF triggers an in-memory PowerShell chain that blinds endpoint sensors and hollows legitimate Windows processes. Furthermore, this fileless Sirius Backdoor drops a custom Windows provisioning package so the malware can survive a full operating system reset.
securityonline.info
October 29, 2026 at 7:21 AM
securityonline.bsky.social
Trellix uncovers the Sirius Backdoor in fake FedEx tax invoices. See how the fileless Sirius Backdoor blinds EDRs and survives Windows OS resets.

#SiriusBackdoor #FilelessMalware #Trellix #Phishing #WindowsSecurity #ProcessHollowing #Cybersecurity
Fake FedEx Tax Invoice PDFs Deliver Fileless Sirius Backdoor to Windows Systems
TL;DR The Trellix Threat Response Team uncovered a multistage attack that uses fake FedEx tax invoices in Korean to deploy the Sirius Backdoor. Inside an attached ZIP archive, a blank PDF triggers an in-memory PowerShell chain that blinds endpoint sensors and hollows legitimate Windows processes. Furthermore, this fileless Sirius Backdoor drops a custom Windows provisioning package so the malware can survive a full operating system reset.
securityonline.info
October 29, 2026 at 7:21 AM
cybercrimeinfo.bsky.social
🚨 #FilelessMalware is een #onzichtbare maar #gevaarlijke #cyberdreiging die gebruikmaakt van #PowerShell en #WMI zonder bestanden achter te laten. Leer hoe je je hiertegen kunt #beschermen 👇

🔗 www.ccinfo.nl/menu-hulpmid...
Vraag van de week: Wat is fileless malware en hoe werkt het? / Tips / Menu Hulpmiddelen & Kwetsbaarheden | Cybercrimeinfo
Fileless malware is een geavanceerde cyberdreiging die geen fysieke bestanden achterlaat, waardoor detectie lastig is. Ontdek hoe het werkt en hoe je je kunt beschermen.
www.ccinfo.nl
April 12, 2025 at 8:43 AM
interfuturesec.bsky.social
Like a ghost, fileless malware can devastate your systems without leaving a trace: could your security stop this type of attack? zurl.co/yXLh2

#cybersecurity #itsecurityoperations #itsecurity #socservices #filelessmalware #malware #cyberchallenges #cybercrime
October 9, 2025 at 10:00 AM
interfuturesec.bsky.social
Fileless malware works off of memory, rather than leaving files behind, making it difficult to detect and destroy: are you systems prepared to deal with stealthy attacks?

#cybersecurity #itsecurityoperations #itsecurity #socservices #filelessmalware #malware #cyberchallenges
October 8, 2025 at 10:01 AM
afterwestphalia.bsky.social
New Post by #Tech4HumanityLab Undergraduate Ryan Mason on "Fileless Malware: The Tradeoff of Synergy and Security."
@VTPSCI @VT_LiberalArts @HumeVT

#FilelessMalware #Tech4Humanity #Cybersecurity
tech4humanitylab.org/blog/2023/11...
Tech4Humanity Lab
Microsoft Windows is a powerful and long-standing operating system with deep-rooted features that work throughout the system. Windows’ .NET, PowerShell, and Windows Management Instrumentation (WMI...
tech4humanitylab.org
November 15, 2023 at 2:28 PM
alphahunt.io
DarkWatchMan + Hive0117 are ghosting Russia’s grids & banks: PowerShell in RAM, encrypted modules, registry persistence. Your disk AV? Interior decoration. 👻⚡

Skim the brief, sharpen your hunt, subscribe for more.

blog.alphahunt.io/darkwatchman...

#AlphaHunt #CyberSecurity #FilelessMalware #CTI
DarkWatchMan and Hive0117: Fileless Malware Evolution Targeting Russian Critical Infrastructure
DarkWatchMan is a fileless, modular malware family first observed in late 2021 and attributed to the financially motivated Hive0117 group. The malware is primarily delivered via spear-phishing emails…
blog.alphahunt.io
September 17, 2025 at 1:57 PM
alphahunt.io
DarkWatchMan + Hive0117: fileless malware haunting Russia’s banks & power grids. Encrypted payloads in RAM, persistence in the registry—AV never even blinks. 👻⚡

Dive in before it dives into you.

Read more → blog.alphahunt.io/darkwatchman...

#AlphaHunt #CyberSecurity #FilelessMalware #CTI
DarkWatchMan and Hive0117: Fileless Malware Evolution Targeting Russian Critical Infrastructure
DarkWatchMan is a fileless, modular malware family first observed in late 2021 and attributed to the financially motivated Hive0117 group. The malware is primarily delivered via spear-phishing emails…
blog.alphahunt.io
September 10, 2025 at 9:16 PM
alphahunt.io
DarkWatchMan + Hive0117 are ghosting Russian critical infra: PowerShell-in-RAM, registry persistence. Disk AV = decor. 👻

Hunt it: blog.alphahunt.io/darkwatchman...

#AlphaHunt #CyberSecurity #FilelessMalware
DarkWatchMan and Hive0117: Fileless Malware Evolution Targeting Russian Critical Infrastructure
DarkWatchMan is a fileless, modular malware family first observed in late 2021 and attributed to the financially motivated Hive0117 group. The malware is primarily delivered via spear-phishing emails…
blog.alphahunt.io
September 4, 2025 at 9:03 PM
alphahunt.io
DarkWatchMan + Hive0117 are ghosting Russia’s critical infra: PowerShell-in-RAM, encrypted modular payloads, registry persistence. Disk AV is a screensaver. 👻🔦

Read & subscribe → blog.alphahunt.io/darkwatchman...

#AlphaHunt #CyberSecurity #FilelessMalware #CTI
DarkWatchMan and Hive0117: Fileless Malware Evolution Targeting Russian Critical Infrastructure
DarkWatchMan is a fileless, modular malware family first observed in late 2021 and attributed to the financially motivated Hive0117 group. The malware is primarily delivered via spear-phishing emails…
blog.alphahunt.io
August 30, 2025 at 3:17 PM
alphahunt.io
DarkWatchMan is ghosting Russia’s critical infra. Hive0117 phishes in, runs PowerShell from RAM, hides in the registry, strolls past AV. Got memory telemetry—or just vibes?

Dive in, hunt smarter, subscribe ➜ blog.alphahunt.io/darkwatchman...

#AlphaHunt #CyberSecurity #FilelessMalware #CTI
DarkWatchMan and Hive0117: Fileless Malware Evolution Targeting Russian Critical Infrastructure
DarkWatchMan is a fileless, modular malware family first observed in late 2021 and attributed to the financially motivated Hive0117 group. The malware is primarily delivered via spear-phishing emails…
blog.alphahunt.io
August 26, 2025 at 9:06 PM
alphahunt.io
Russia built an empire on “fileless” propaganda—now DarkWatchMan brings the RAM version. Hive0117 phishes in, encrypts payloads, parks in the registry, and strolls past AV. Got memory telemetry or just vibes? 👻

blog.alphahunt.io/darkwatchman...

#AlphaHunt #CyberSecurity #FilelessMalware #CTI
DarkWatchMan and Hive0117: Fileless Malware Evolution Targeting Russian Critical Infrastructure
DarkWatchMan is a fileless, modular malware family first observed in late 2021 and attributed to the financially motivated Hive0117 group. The malware is primarily delivered via spear-phishing emails…
blog.alphahunt.io
August 22, 2025 at 1:06 PM
alphahunt.io
🧟 DarkWatchMan just ghosted Russia’s power grid: Hive0117 runs pure-RAM PowerShell, parks itself in the registry and laughs at your disk scanners. Ready to hunt the invisible?

Full brief & hunt kit 👉 blog.alphahunt.io/darkwatchman...

#AlphaHunt #CyberSecurity #FilelessMalware
DarkWatchMan and Hive0117: Fileless Malware Evolution Targeting Russian Critical Infrastructure
DarkWatchMan is a fileless, modular malware family first observed in late 2021 and attributed to the financially motivated Hive0117 group. The malware is primarily delivered via spear-phishing emails…
blog.alphahunt.io
August 11, 2025 at 9:45 PM
alphahunt.io
🕵️♂️ DarkWatchMan is ghosting Russian banks—Hive0117 drops PowerShell in RAM, registry persistence, zero files on disk. Your AV = doorstop.

Full teardown & hunt kit 👉 blog.alphahunt.io/darkwatchman... Read & subscribe. 🔥🚨

#AlphaHunt #CyberSecurity #FilelessMalware #CTI
July 22, 2025 at 1:17 PM
thedailytechfeed.com
Cybercriminals exploit Google's DoubleClick to distribute fileless .NET malware via malspam, evading email security measures. #CyberSecurity #Malspam #GoogleDoubleClick #FilelessMalware thedailytechfeed.com/malspam-camp...
June 8, 2026 at 4:15 PM
thedailytechfeed.com
Fileless malware operates entirely in memory, evading traditional detection methods. Learn how to protect your systems from these stealthy threats. #CyberSecurity #FilelessMalware #InfoSec Link: thedailytechfeed.com/understandin...
October 3, 2025 at 4:28 PM
securityonline.bsky.social
Group-IB uncovered XMRig Linux PAM abuse that lets a fileless Monero miner regenerate across user accounts and vanish from disk forensics.

#XMRig #CryptoMining #LinuxSecurity #PAMabuse #FilelessMalware
XMRig Botnet Abuses Linux PAM to Spread Forensic Smokescreen Across User Accounts
At a glance
securityonline.info
August 5, 2026 at 7:11 AM
matricedigitale.bsky.social
UNC5174 utilizza malware fileless come vshell e snowlight con c2 websocket e tecniche evasive per spionaggio e persistenza su Linux

#CobaltStrike #cyberspionaggio #filelessmalware #gooogleasia #guerracibernetica #Linux #snowlight #unc5174 #vshell #WebSocket
www.matricedigitale.it/sicurezza-in...
April 15, 2025 at 5:59 PM
digitaledgeny.bsky.social
🧠 Invisible Malware Is Still Malware — Are You Seeing It?

Learn more:👉 https://f.mtr.cool/vgcxhnsrrn

#CyberSecurity #FilelessMalware #MemoryDetection #DigitalEdge #ThreatHunting #ZeroTrust #SecurityOps
March 6, 2026 at 7:43 PM
ralf-ladner.bsky.social
APT-Angriff gegen Militärunternehmen auf den Philippinen

#AdvancedPersistentThreat @Bitdefender_DE #Cybersecurity #Cybersicherheit #EggStreme #FilelessMalware #Keylogger #Malware #Spionage @Bitdefender

netzpalaver.de/2025/...
September 10, 2025 at 3:19 PM
infoseck2k.bsky.social
Fileless malware uses native tools, evades detection in memory. Minimal traces. Behavioral detection critical. Infosec K2K provides real-time visibility, security.

#CyberSecurity #FilelessMalware #EndpointSecurity #ZeroTrust #CyberThreats #BehavioralAnalytics #InfosecK2K
April 30, 2026 at 8:30 AM