Daily Cybersecurity
Threat Intelligence

TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development

This article provides an in-depth analysis of TuxBot v3, an IoT botnet framework built using LLM assistance. It examines the botnet's cross-compiled binaries, command-and-control architecture, and discovered vulnerabilities.

OkoBot: new sophisticated malware framework targets cryptocurrency users

OkoBot: new sophisticated malware framework targets cryptocurrency users

In January 2026, Kaspersky identified a sophisticated malware framework, dubbed OkoBot, targeting cryptocurrency users. The malware captures cryptocurrency wallet contents and orchestrates attacks via an SSH tunnel, delivering over 20 malicious payloads, including TeviRAT, keyloggers, and stealers.

Daxin Returns: Stealthy Malware Resurfaces in Taiwan Alongside a New Backdoor

Symantec discovered Daxin, a highly advanced malware from a China-linked actor, running inside a Taiwan manufacturing firm. The malware was deployed alongside a new backdoor, marking its return after four years.

Daxin Returns: Stealthy Malware Resurfaces in Taiwan Alongside a New Backdoor

Symantec reports Daxin, an advanced China-linked malware, has resurfaced in a Taiwan manufacturing firm with a new backdoor, four years after its initial discovery, emphasizing persistent threats to industrial targets.

Daxin Returns: Stealthy Malware Resurfaces in Taiwan Alongside a New Backdoor

Four years after Symantec first uncovered Daxin, the most advanced malware we had seen from a China-linked actor, it has been found running inside a Taiwan manufacturing firm, deployed with a novel new backdoor.