SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
New Zealand

Fileless malware Stories

Global Stories

Fileless malware stories

Upwind Expands to Sydney: Real Time Cloud Security for APJ
Hyperscale

Upwind Expands to Sydney: Real Time Cloud Security for APJ

The Sydney move follows a USD $250 million funding round as the cloud security firm bets on real-time protection for fast-growing AI workloads.

By Anthony Caruana • 4 min read • This month
DeepLoad malware steals credentials via ClickFix campaign
Malware

DeepLoad malware steals credentials via ClickFix campaign

Businesses face credential theft and reinfection risks as DeepLoad hides inside trusted Windows processes and evades routine clean-up.

By Joseph Gabriel Lagonsin • 4 min read • Last month
ManageEngine adds EDR & Zero Trust access to platform
Malware

ManageEngine adds EDR & Zero Trust access to platform

ManageEngine folds EDR and Zero Trust private access into Endpoint Central, unifying endpoint management and security in one console.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 20th Mar 2026
Cohesity adds Sophos scans to backup recovery tools
Malware

Cohesity adds Sophos scans to backup recovery tools

Cohesity bakes Sophos malware scanning into its Data Cloud to spot hidden threats in backups and cut reinfection risk during recovery.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 20th Mar 2026
ManageEngine adds EDR & zero trust to Endpoint Central
Malware

ManageEngine adds EDR & zero trust to Endpoint Central

ManageEngine turns Endpoint Central into a unified endpoint security and access platform by adding built-in EDR and zero trust private access.

By Catherine Knowles • 4 min read • Thu, 19th Mar 2026
LeakNet adopts ClickFix lures & Deno fileless loader
Storage

LeakNet adopts ClickFix lures & Deno fileless loader

Ransomware group LeakNet adopts ClickFix lures and a Deno-based fileless loader to scale attacks and evade traditional endpoint defences.

By Sofiah Nichole Salivio • 5 min read • Thu, 19th Mar 2026
Attackers abuse Deno runtime to deploy fileless malware
Endpoint Detection and Response

Attackers abuse Deno runtime to deploy fileless malware

Hackers are abusing the trusted Deno JavaScript runtime to run fileless CastleRAT malware solely in memory and evade endpoint defences.

By Catherine Knowles • 4 min read • Thu, 12th Mar 2026
Kernel in the crosshairs: The BlackSanta threat campaign targeting recruitment workflows
Storage

Kernel in the crosshairs: The BlackSanta threat campaign targeting recruitment workflows

A stealthy BlackSanta malware spree is hijacking HR recruitment workflows, killing endpoint defence tools and exfiltrating sensitive data.

By Aditya K. Sood • 4 min read • Wed, 11th Mar 2026
LummaStealer returns post-takedown with ClickFix ruse
Multi-factor authentication

LummaStealer returns post-takedown with ClickFix ruse

LummaStealer roars back after domain takedown, using fake CAPTCHA ClickFix tricks and CastleLoader to spread via routine user actions.

By Karen Joy Bacudo • 4 min read • Fri, 13th Feb 2026
Google warns of AI model theft & state-backed misuse
Malware

Google warns of AI model theft & state-backed misuse

Google flags surging attempts to steal AI models as state-backed hackers weaponise Gemini for phishing, intel gathering and malware support.

By Sean Mitchell • 6 min read • Thu, 12th Feb 2026
Espionage Without Noise: Understanding APT36's Enduring Campaigns
Distributed Denial of Service

Espionage Without Noise: Understanding APT36's Enduring Campaigns

Indian defence faces a decade-long silent siege as APT36 refines cross-platform cyber espionage with stealthy, persistent RAT campaigns.

By Dr Aditya Sood • 5 min read • Wed, 11th Feb 2026
LinkedIn DMs abused to spread Python-based malware
Firewalls

LinkedIn DMs abused to spread Python-based malware

Attackers are abusing LinkedIn private messages to deliver Python-based malware via booby-trapped archives, ReliaQuest has warned.

By Catherine Knowles • 4 min read • Wed, 21st Jan 2026
Storm-0249 hijacks security tools to fuel ransomware
Malware

Storm-0249 hijacks security tools to fuel ransomware

Storm-0249 hijacks trusted security and Windows tools to stealthily broker high-value network access for ransomware operators.

By Karen Joy Bacudo • 5 min read • Wed, 7th Jan 2026
Fake Leonardo DiCaprio torrent spreads Agent Tesla trojan
Endpoint Protection

Fake Leonardo DiCaprio torrent spreads Agent Tesla trojan

Fake torrents of Leonardo DiCaprio film One Battle After Another are spreading Agent Tesla malware that hijacks Windows PCs, experts warn.

By Sean Mitchell • 5 min read • Thu, 11th Dec 2025
CL0P hackers exploited Oracle EBS zero-day for data extortion
Firewalls

CL0P hackers exploited Oracle EBS zero-day for data extortion

Hackers linked to CL0P exploited an Oracle E-Business Suite zero-day from July 2025, stealing data and extorting dozens of organisations worldwide.

By Melvin Hipolito • 4 min read • Fri, 10th Oct 2025
EggStreme malware targets Philippine military in Chinese cyber campaign
Advanced Persistent Threat Protection

EggStreme malware targets Philippine military in Chinese cyber campaign

Chinese-linked EggStreme malware targets Philippine military firm, signalling rising espionage efforts in Asia-Pacific by advanced threat groups.

By Melvin Hipolito • 4 min read • Thu, 11th Sep 2025
Broadcom strengthens VMware Cloud Foundation with new AI security
Firewalls

Broadcom strengthens VMware Cloud Foundation with new AI security

Broadcom launches new AI-focused cyber security features for VMware Cloud Foundation to boost compliance and protect private clouds in regulated sectors.

By Catherine Knowles • 4 min read • Thu, 4th Sep 2025
Acronis & Intel partner to deliver AI threat detection on PCs
Software-as-a-Service

Acronis & Intel partner to deliver AI threat detection on PCs

Acronis partners with Intel to offer AI-powered, real-time threat detection on PCs with Intel Core Ultra processors, boosting security and performance.

By Catherine Knowles • 4 min read • Thu, 28th Aug 2025

Stories from Other Regions

Fileless malware stories