SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 67

Security Affairs Malware newsletter Round 67, authored by Pierluigi Paganini and dated 19 October 2025, offers a curated collection of malware research and related developments from across the international landscape.

The feature describes itself as “a collection of the best articles and research on malware in the international landscape.” It links to a series of prominent research pieces and analyses, including Astaroth: Banking Trojan Abusing GitHub for Resilience, North Korea’s Contagious Interview Campaign Escalates: 338 Malicious npm Packages, 50,000 Downloads, New Rust Malware “ChaosBot” Uses Discord for Command and Control, and Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems[.]org.

Additional items highlighted include When the monster bytes: tracking TA585 and its arsenal, TigerJack’s Extensions Continue to Rob Developers Blind Across Different Marketplaces, and LinkPro: eBPF rootkit analysis, among others. The newsletter also features a regional and thematic mix of security topics, with follow-up notes and related stories from the broader Security Affairs ecosystem.