📄 Security Affairs Malware Newsletter Round 117

The latest malware newsletter compiles recent reporting and research on active threats across Windows, macOS, cloud, WordPress, npm, and critical infrastructure. Items highlighted include Lunex stealer, Storm-3168 cloud intrusions, TraderTraitor backdoors, PhantomSub npm abuse, Warlock ransomware, RedFlick phishing, Antino targeting in Asia, and CloudSyncD on macOS.

The roundup is notable for its breadth: credential theft, cloud abuse, software supply chain compromise, phishing delivery refinement, and persistence mechanisms all appear in one cycle. The concentration of cases shows simultaneous pressure on enterprise identity, developer ecosystems, public-sector targets, and operational technology-adjacent networks.

🛰️ Open sources - closed narratives
@sitreports