安全研究人员观察到Mistic与ModeloRAT（一种基于Python的远程访问木马）协同运作，后者与代号Woodgnat（公开名KongTuke）的金融动机黑客组织存在关联。 隐蔽性极强的内存驻留后门 自2026年4月起，一种名为Mistic的新型Windows后门程序在企业网络中悄然扩散。该恶意软件通过完全在内存中执行载荷的方式实现持久化访问，不向硬盘写入任何恶意文件，使得传统依赖磁盘文件扫 ...

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

SentinelOne says macOS.Gaslight uses prompt injection to mislead AI-based malware analysis, steal data, and use Telegram for ...

The only setup required is to download an OAuth 2.0 Client ID file from Google that will authorize your application. This can be done at: https://console.developers ...

The Gaslight macOS malware from a North Korean cluster doesn't bypass AI analysis platforms yet, but its 38-message prompt injection cascade makes the direction of travel clear. Here's why this ...

SentinelOne details Gaslight, a Rust-based macOS implant linked to North Korea-aligned actors that uses prompt injection to ...

Today, the leading Web3 market data infrastructure provider in Southeast Asia, Treno Scope, officially announced the launch ...