This roundup covers major cybersecurity developments, including new malware and backdoors, critical vulnerabilities, phishing schemes, AI-agent abuse, and large-scale data breaches affecting organizations such as ZyXEL, Check Point, Elsevier, Google, and Microsoft. It also highlights growing risks from malicious bots, deepfakes, impersonation scams, and emerging security challenges tied to AI, cloud services, and critical infrastructure. #TASKSTOMP #ZyXEL #Elsevier #CheckPoint #EvilTokens #Gyazo #OpenAI #Google #Microsoft

TASK#STOMP Windows backdoor uses PowerShell, scheduled tasks and runtime C# compilation to steal business documents and maintain remote access.

At a Glance Attribute Details Malware Family TASK#STOMP Threat Actor Unknown (Unconfirmed attribution) Target Victims Enterprise networks and corporate document repositories Delivery Vector Deceptive VBScript execution (initial delivery under investigation) Key Capabilities Continuous document theft, Wi-Fi password theft, clipboard capture, C2 failover Source Securonix Threat Research Executive Summary The newly discovered malware framework establishes persistent access on compromised Windows endpoints through scheduled tasks and startup files.

TASK#STOMP Windows backdoor uses PowerShell, scheduled tasks and runtime C# compilation to steal business documents and maintain remote access.

Researchers analyzed TASK#STOMP, a Windows backdoor that hunts for business documents, exfiltrates them, and persists to steal new or modified files while also collecting Wi-Fi credentials, clipboard text, screenshots, and operator commands. Securonix says the malware uses multiple footholds, likely arrives via phishing with a ZIP or ISO/IMG attachment, and shows no clear attribution to a known APT. #TASKSTOMP #Securonix #WindowsScriptHost #VBScript #PowerShell