SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 76

Security Affairs Malware Newsletter Round 76, by Pierluigi Paganini, dates 21 December 2025. According to Security Affairs, the newsletter includes a collection of the best articles and research on malware in the international landscape.

It features items such as CyberVolk, a Deep Dive into the Hacktivists, Tools and Ransomware Fueling Pro-Russian Cyber Attacks; Operation MoneyMount-ISO — Deploying Phantom Stealer via ISO-Mounted Executables; Inside GhostPoster: How a PNG Icon Infected 50,000 Firefox Users; About ZnDoor, a malware executed by React2Shell; Malicious NuGet Package Typosquats Popular .NET Tracing Library to Steal Wallet Passwords; and more, including noted analyses on Android botnets and other threats. The roundup also highlights related research such as Massive Android botnet Kimwolf infects millions, strikes with DDoS and other security discussions.