> SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 111

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Akira Hits Safe Mode: Ransomware Rebooting Around EDR  Multi-Functional Linux Botnet “Evooo1Bot”      StubMaker RubyGems Campaign Delivers a Windows Infostealer   Hunting MacSync Stealer infrastructure through behavioral pivots  Manic: Blend between Banking Malware & Spyware   Clop Returns with Custom Implant in Mass-Extortion Campaign The ToxicPanda Never Sleeps: ToxicPanda 2.0 Prepares its Next Strike on Mobile Striking gold: Inside the GoldDigger Android malware      SilkParasite: Tracking a China-Nexus APT Across Central Asia Prompting the Payload: How an npm Supply Chain Attack Delivers the RedC2 AI-Powered Linux Implant   The invisible passenger in your car Malware Crypting Services and the Threat Actors Who Sell Them  Grandoreiro goes north: From Brazil to Mexico with a new DLL sideloading campaign   Survival of~the~Stealthiest: Evolving Low-Entropy Ransomware via~Genetic Algorithms Malformer: A Multi-Modal Malware Detector Using Transformers XAI-Guided Graph-Based Feature Engineering and Heterogeneous Ensemble Learning for Android Malware Detection An Explainable Deep Learning Pipeline for Malware Family Classification: GAF Image Encoding and API-Grounded LLM Interpretation Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini (SecurityAffairs – hacking, newsletter)