> SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 122

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia   Shutting the Door on the XCPE Botnet   DarkBlinders: Inside an Active Espionage Campaign   Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles   Poisoned Source: APT29 watering holes target mobile devices with n-day exploits  Hackers hijack cPGuard autoupdate to deploy backdoor, steal data   CWPdoor: The Invisible Backdoor Living Inside Control Web Panel   Insolence beyond belief. Threat actors target information security developers on GitHub   What Malware Actually Does: An Empirical Analysis of Post-Infection Behavior Across Malware Families MEvince: Knowledge-Constrained LLM Reasoning for Technique Identification from Malware Reports A Log-to-Image Transformation Framework for Behavior-Aware Malware and Anomaly Detection Decoding Maliciousness: LLM-Assisted Semantic Filtering for Scalable Malicious PyPI Package Detection Follow me on Twitter: @securityaffairs and Facebook and Mastodon Pierluigi Paganini (SecurityAffairs – hacking, newsletter)