CyberSum logo
Back

XWorm V6.0 Malware Resurfaces with New Plugins

Cyber Security News by CyberSum.net
2 sources
The notorious XWorm malware has resurfaced as version 6.0, despite being considered retired after its previous version was compromised. This new iteration is distributed through phishing emails and uses a multi-stage infection chain to inject itself into legitimate system processes. Its modular architecture allows attackers to deploy over 35 specialized plugins for activities ranging from data theft and remote control to ransomware deployment. XWorm V6.0 also introduces advanced persistence methods to survive system resets and fixes critical vulnerabilities found in its predecessor. A multi-layered, behavior-focused security posture is essential to defend against this evolving threat.

Also Read

Rhadamanthys Stealer Adopts Pro SaaS Model

A sophisticated information stealer named Rhadamanthys is being sold on underground markets as a professional Malware-as-a-Service. The operators use a subscription-based model with tiered pricing, mimicking legitimate software businesses to attract serious cybercriminals. Its latest version introduces advanced features, including custom executable formats, strong obfuscation, and payload delivery hidden within PNG image files. The malware also employs enhanced evasion techniques to bypass security analysis and sandbox environments. Rhadamanthys is designed to steal a wide range of sensitive data, including credentials, cryptocurrency wallets, browser information, and VPN configurations.

By Cyber Security News by CyberSum.net