svchost.exe

• GopherWhisper: A burrow full of malware

  GopherWhisper: A burrow full of malware ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian governmental institutions GopherWhisper: A burrow full of malware Award-winning news, views, and insight from the ESET secu

• Defense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark

  Defense at AI speed: Microsoft’s new multi-model agentic security system tops leading industry benchmark Today Microsoft is announcing a major step forward in AI-powered cyber defense: a new multi-model agentic scanning harness (codenamed MDASH). The post Defense at AI speed: Mi

• Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns

  Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns Unit 42 details Screening Serpens' use of AppDomainManager hijacking and new RAT variants to target tech and defense sectors in recent campaigns. The post Tracking Iranian APT Screening Serpens’ 2026 Espionage Camp

• Fast and Furious – Nimbus Manticore Operations During the Iranian Conflict

  Fast and Furious – Nimbus Manticore Operations During the Iranian Conflict Key Findings Introduction During the recent geopolitical tensions in the Middle East, we reported on multiple Iran-nexus threat actors advancing Iran’s strategic objectives through cyber operati

• FishMonger’s arsenal upgraded: SprySOCKS for Windows

  FishMonger’s arsenal upgraded: SprySOCKS for Windows ESET researchers have discovered SprySOCKS for Windows, FishMonger’s backdoor weaponizing a kernel driver for advanced stealthiness FishMonger’s arsenal upgraded: SprySOCKS for Windows Award-winning news, views, and insight f

• New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Forever

  New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Forever New Abuse of the ClickOnce Technology: Part 2 | CrowdStrike Blog Featured New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying For

All reports →

• Connector · intel_report_ingest8