At a Glance Malware Family BBNet Linux botnet (META payload v3.0; 13 ELF binaries across 10 unique SHA-256 hashes using .bbnet local artifacts) Threat Actor Unattributed operator (package recovered from an exposed directory; no confirmed or suspected actor attribution) Target / Victims

Swiss cybersecurity firm Prodaft has launched a new initiative called 'Sell your Source' where the company purchases verified and aged accounts on hacking forums to to spy on cybercriminals.

Forescout Research – Vedere Labs, in collaboration with PRODAFT, has unveiled a massive ransomware campaign exploiting vulnerabilities in DrayTek Vigor routers, marking a new frontier in the targeting of network... The post Massive Ransomware Campaign Targets DrayTek Routers appeared first on Cybersecurity News.

La firma suiza de ciberseguridad Prodaft ha lanzado una nueva iniciativa llamada "Sell your Source", mediante la cual compran cuentas verificadas y de

Jul 24, 2025Ravie LakshmananMalware / Cybercrime Cybersecurity researchers have shed light on a new versatile malware loader called CastleLoader that has been put to use in campaigns distributing various information stealers and remote access trojans (RATs). The activity employs Cloudflare-themed ClickFix phishing attacks and fake GitHub repositories opened under the names of legitimate applications, Swiss cybersecurity company PRODAFT said in a report shared with The Hacker News.

Prodaft said the Steam Early Access game contains the Fickle Stealer, Vidar Stealer, and HijackLoader malware.

Swiss cybersecurity firm Prodaft has launched a new initiative called 'Sell your Source' where the company purchases verified and aged accounts on hacking forums to to spy on cybercriminals.

Swiss cybersecurity firm Prodaft has launched a new initiative called 'Sell your Source' where the company purchases verified and aged accounts on hacking forums to to spy on cybercriminals. [...]

O infame grupo cibercriminoso Black Basta enfrenta novamente um período turbulento. A 11 de fevereiro de 2025, foram revelados registos internos das conversas do grupo na plataforma Matrix, alegada…

Hey, Valve. I know y’all are busy banning porn games and not making a new Steam Deck design. But is everything okay over there? I ask because, for the third time in 2025, someone’s been caught sneaking malware into a new game on the Steam storefront. This is becoming a trend. According to security researchers at Prodaft (via BleepingComputer), this might not be a case of the game being uploaded via Early Access to spread malware. Instead, a known hacker injected the game files for post-apocalypse crafting game _Chemia_ with spyware on July 22nd. Researchers say that two separate packages were remotely added to the game files, with the intention of being distributed via Steam’s store. Both the HijackLoader and Fickle Stealer packages were discovered in the game’s download files. _Chemia_ is still available to download for free on Steam via the Playtest feature, a sort of invitation beta program. The Early Access game has no release date and no current user reviews, so the number of actual infections may be quite low. Games hosting malware on Steam were discovered in February (_PirateFi_) and March (_Sniper: Phantom’s Resolution_), but in both cases the games and the listings appeared to be deliberate fakes with stolen assets, presumably made with the sole intention of spreading malware via free downloads. They were both quickly removed from Steam. _Chemia_ was posted to the Steam store 15 months ago. There’s no indication that it’s anything but a legitimate game, albeit one of many thousands that get posted to Steam and then languish in development. It seems possible that the developer themselves (Aether Forge Studios, no other projects) got hacked and their access to Steam was compromised. Regardless, it’s a disturbing trend for those who trust Steam for safe downloads.

A empresa de inteligência cibernética PRODAFT publicou detalhes sobre a iniciativa SYS, que visa adquirir contas de fóruns da darknet como parte de suas operações de inteligência humana (HUMINT).

PRODAFT reveals Russian-speaking group Nebulous Mantis spied on NATO using advanced malware, phishing, and bulletproof hosting to evade detection.

Um sich Zugang zu den Netzwerken der Cyberkriminellen zu verschaffen, bietet Prodaft Geld für Accounts an. Abgewickelt wird anonym, bezahlt in Kryptowährungen.

An early access game on Steam called Chemia has been updating itself to deliver 'multiple malware families,' according to cybersecurity vendor Prodaft.