Emerging Malware Threats Targeting Defense and Software Systems

First seen 10 Nov 2025, 08:55 UTC • Securityaffairs.Co

•96% similarity •34

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Recent malware developments include the SesameOp backdoor utilizing OpenAI Assistants API for command and control, and advanced SSH-Tor backdoors targeting the defense sector. Additionally, Gootloader has resurfaced with new tactics, while ransomware variants are exploiting vulnerabilities in Windows systems through remote management tools.

ThreatCluster AI

Attack Flow

11 entities, 16 inferred relationships (STIX 2.1).

Technique (2)

Malware
Ransomware

Malware (3)

Gootloader
Sesameop
SSH-Tor Backdoor

Affected Platform (2)

Linux
Windows

Threat Actor (2)

Qilin
Ransomvibing

Tool (2)

VS Code
OpenAI Assistants API

Relationships

Qilin uses Gootloader
Qilin uses Sesameop
Qilin uses SSH-Tor Backdoor
Ransomvibing uses Gootloader
Ransomvibing uses Sesameop
Ransomvibing uses SSH-Tor Backdoor
Qilin uses VS Code
Qilin uses OpenAI Assistants API
Ransomvibing uses VS Code
Ransomvibing uses OpenAI Assistants API
Qilin uses Malware
Qilin uses Ransomware
Ransomvibing uses Malware
Ransomvibing uses Ransomware
Qilin related to Linux
Qilin related to Windows

Community

Browse all →

Emerging Malware Threats Targeting Defense and Software Systems

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading