Latest Developments in Security: Malware Analysis and Attacks
New malware types and the latest trends in cybersecurity.
1Latest Developments in the Malware World
The Security Affairs Malware newsletter brings together the best articles and research on malware in the international arena. The July 2026 issue covers primary threat vectors like UAC-0145 and new malware types such as SleeperGem. These types target popular software like git_credential_manager, Dendreo, and fastlane RubyGems, leaving a persistent backdoor. These developments are drawing the attention of cybersecurity experts, necessitating new protection strategies.
2AgentBaiting: Malware Distribution with Fake AI Skills
A new attack method called AgentBaiting uses over 800 fake AI skills and MCP servers to distribute malware. These attacks make it easier for attackers to infiltrate victims' systems, causing significant chaos. By gaining victims' trust, attackers successfully spread malware. Such attacks require new cybersecurity measures to be implemented.
3The New Face of Ransomware: msaRAT
A new type of ransomware, msaRAT, creates a covert command and control channel using browsers. This method allows attackers to remotely access victims' systems easily. msaRAT is particularly effective in browser-based attacks, enabling malware to spread unnoticed. These attacks necessitate further work on browser security by cybersecurity experts.
4HOLLOWGRAPH: Abusing Microsoft 365 Calendars
A new attack method called HOLLOWGRAPH turns Microsoft 365 calendars into covert command and control channels. This method facilitates attackers' infiltration of victims' systems, allowing malware to spread unnoticed. HOLLOWGRAPH poses a significant threat to corporate users, requiring the development of new protection strategies.
5NuGet Typosquat: Targeting Betting Platforms
A new attack method called NuGet Typosquat targets betting platforms to manipulate results. These attacks make it easier for attackers to infiltrate victims' systems, causing significant chaos. By gaining victims' trust, attackers successfully spread malware. Such attacks require new cybersecurity measures to be implemented.
6UAC-0099: New Malware Types and Updates
A new malware type called UAC-0099 includes updated versions of older types like LUNCHPOKE and BURNYBEAR. These types target popular software such as Notepad++ 8.8.3 to infiltrate systems. UAC-0099 poses a significant threat to corporate users, requiring the development of new protection strategies.
7Attack on Thailand's Ministry of Finance
Thailand's Ministry of Finance was targeted by new malware types like Hermes AI Agent and Hades Implant. These attacks make it easier for attackers to infiltrate victims' systems, causing significant chaos. By gaining victims' trust, attackers successfully spread malware. Such attacks require new cybersecurity measures to be implemented.
8New Trends and Measures in Cybersecurity
Malware types and attack methods are rapidly evolving in the cybersecurity world. These developments require cybersecurity experts to develop new protection strategies. Browser-based attacks and fake AI skills pose significant threats. Such attacks create substantial risks for corporate users, necessitating new measures to be implemented.