Back Securityaffairs.Co

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 80

Securityaffairs.Co •Pierluigi Paganini • January 18, 2026

Security Affairs Malware includes a collection of the best articles and research on malware in the international landscape Malware Gogs 0-Day Exploited in the Wild SHADOW#REACTOR – Text-Only Staging, .NET Reactor, and In-Memory Remcos RAT Deployment “Untrustworthy Fund”: targeted UAC-0190 cyberattacks against SOU using PLUGGYAPE (CERT-UA#19092) Hiding in Plain Sight: Deconstructing the Multi-Actor […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exploitation of Gogs 0-Day and Targeted Cyberattacks on SOU A Gogs 0-day vulnerability is being actively exploited in the wild, alongside targeted UAC-0190 cyberattacks against SOU utilizing the PLUGGYAPE malware. The attacks involve sophisticated techniques, including the deployment of in-memory Remcos RAT and other malware variants. 2 sources 30

Extracted Entities

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 80

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Companies (1)

Malware (1)

Tools (1)