Malware & Ransomware coverage from Cipher Insider holds 19 articles, 15 of them reference guides. The newest was published on October 19, 2026. New stories are added as soon as they are confirmed, from more than 150 sources checked as often as every 45 seconds. Each story lists its sources. Primary sources we follow for this section include MITRE ATT&CK and No More Ransom.
Cybersecurity vendor Immersive reports that infostealer malware now accounts for 75% of all stolen credentials, compromising browser data and authentication tokens.
Researchers found that Israeli ad firm Discover-Tech helped deliver zero-click spyware to journalists through online advertising networks.
Understanding packers and crypters reveals why standard antivirus often misses threats that look like legitimate system files.
Endpoint detection and response relies on behavioural analysis, not just signature matching, meaning it misses threats that mimic normal system activity.
Droppers place malicious code on a system first, while loaders execute it later, creating a time gap that standard antivirus often misses during routine scans.
Fileless malware hides in memory and uses system tools, making it invisible to signature-based scanners that only check hard drives for known bad files.
Keyloggers often survive standard antivirus scans because they operate at the driver level, requiring a bootable external tool to safely identify and purge them from your system.
Worms bypass human interaction by exploiting software flaws to replicate across networks, making them distinct from viruses that require a host file.
This malware uses conditional activation to evade detection, remaining silent until victims access specific financial websites, complicating automated analysis.
A malware infection at contractor Nippon Columbia has compromised the personal data of millions of Daiichi Kosho customers and staff members.
macOS security relies on user choices rather than default hardening, meaning common configuration oversights allow malware to persist and escalate privileges silently.
Quarantine transforms executable code into harmless data, allowing you to reverse a false positive without risking system infection.
Fake antivirus software often installs rootkits that survive standard deletion, requiring offline scanning and credential rotation to fully neutralise the threat.
Clipboard hijackers do not steal data by reading your screen; they intercept the system clipboard API, replacing copied credentials with attacker-controlled values before you paste them.
Malware on phones often hides inside legitimate-looking utilities, stealing data through permissions you granted without realising the scope.
Volatile memory retains cryptographic keys and process trees that disappear when a system powers down, offering a unique window into active threats.
Most detection failures stem from ignoring the hidden computational cost of heuristics and misinterpreting legitimate administrative actions as malicious intent.
Browser hijackers often hide in plain sight by altering DNS settings and injecting scripts, making standard antivirus scans insufficient for full removal.
Clipboard hijackers operate silently in the background, swapping sensitive data without triggering standard antivirus alerts or requiring user interaction.