> SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 113

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Hackers Steal Claude Login Sessions With Infostealer Malware to Hijack Accounts Fire Ant Evolves: From Hypervisors to Trusted Infrastructure       Gryxa: The AI-Built Toolkit That Watches How You Remove It ValleyRAT masquerading as adware   13 Malicious Packagist Themes Deliver iOS Spyware That Steals Crypto Wallet Seeds   Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set Uncovering StreamRat: From Meta Ads to Full Device Takeover   Counterfeit installers to system compromise: Tracking a deceptive software download campaign Gaming the system: how a Chinese-speaking actor turned Brazilian government sites into an SEO weapon September 2, 2026 Mini Shai-Hulud’s Latest Wave: 280 New Places It Hunts for Your Secrets   Pegasus Spyware Infection of Serbian Pro-Democracy Student Activist  Chinese-Speaking Operator Uses AI Agents to Target Government and Education Systems Across Asia DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors Anatomy of BraZetsu: How Cybercriminals Fuel the Underground Ecosystem Peer Pressure: Inside the Sality Botnet Disruption Operation Graph-Based Learning for Android Authorship Attribution: A Comparative Analysis of GNN Models Stability and Hopf Criteria in a Malware Dissemination Model for Wireless Sensor Networks with Distributed Recovery Delays PhantomCall: Evading ML Malware Detectors via Function Call Graph Perturbation REPLICANT: Learning Policies for Evading and Hardening Malware Detectors Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini (SecurityAffairs – hacking, newsletter)