SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 69

Security Affairs’ Malware Newsletter Round 69, authored by Pierluigi Paganini and published on 2 November 2025, curates a selection of malware-focused research and analysis from across the international security landscape. The roundup highlights notable reports and blog posts, including Trend Micro’s coverage of Agenda Ransomware deploying a Linux variant on Windows systems via remote management tools and BYOVD techniques, and Talos Intelligence’s exposure of Qilin attack methods across multiple cases.

It also features analyses such as Mem3nt0 Mori from Securelist, insider threats amid plummeting ransom payments from Coveware, and ASERT Threat Summary on Aisuru and related TurboMirai botnet DDoS mitigation from Netscout.

Additional links cover ThreatFabric’s Herodotus Android malware, UNC6384 weaponising a vulnerability to deploy PlugX, and broader industry commentary on AI’s role in ransomware, with further items on NFC relay malware, and other malware, security and data-breach topics sourced from various researchers and vendors. In short, the newsletter provides a compact, citable snapshot of current malware research and threat activity for November 2025.