Experts told CyberScoop the research 'doesn’t pass a sniff test' and detracts from needed conversations around credential abuse and information stealers.

AVCheck and related crypting services helped cybercriminals make malware difficult to detect and confirm that malware could slip through various antivirus tools undetected, officials said.

The successful break-up of DanaBot marks the second high-profile law enforcement disruption of a widespread malware operation in as many days.

Cybercriminals used the prolific malware to target individuals and businesses, including Fortune 500 companies, according to the FBI.

The long-running botnet operation used malware that infected older wireless internet routers over a 20-year period, according to federal prosecutors.

Inexpensive information-stealing malware surged in 2024, infecting 23 million hosts, according to Flashpoint.

Socket researchers said the malware-ridden packages were collectively downloaded over 330 times. GitHub removed all of the malicious packages Wednesday.

After Ivanti detected the activity, Mandiant says it found malware in impacted devices associated with a Chinese-linked threat group.

Known as Glutton, researchers at QiAnXin’s XLab believe Winnti is responsible for the malware.

The department’s Office of Foreign Assets Control said Guan Tianfeng used a zero-day exploit to deploy malware on 81,000 firewalls.