Security Affairs Releases Malware Newsletter Round 118 Highlighting Linux Backdoor and Web‑Based Campaigns

The latest edition of Security Affairs' Malware Newsletter, round 118, has been published, offering a curated selection of recent research and analysis that maps the current global malware landscape.

Each issue serves as a digest for security professionals, aggregating findings from academic papers, threat‑intel feeds, and independent investigators. By collating these resources, the newsletter aims to provide a rapid overview of emerging threats without requiring readers to sift through disparate sources.

Among the featured pieces is an investigation into the ClingSTUN Linux backdoor, which leverages publicly available Session Traversal Utilities for NAT (STUN) servers to hide command‑and‑control traffic. The study details how the malware abuses the openness of STUN infrastructure, allowing attackers to route malicious payloads through legitimate network services and evade conventional detection mechanisms.

Another prominent report, identified as UAC-0277, examines the ClickFix campaign that compromises legitimate websites to deliver malicious code to visitors. The analysis outlines the injection techniques used, the payload distribution chain, and the broader impact on unsuspecting users who trust the compromised domains.

The inclusion of these topics reflects a broader shift observed in recent months: adversaries are increasingly targeting Linux environments and repurposing benign internet services for illicit ends. Such tactics complicate defensive postures, as they blur the line between normal traffic and malicious activity, prompting security teams to adopt more nuanced monitoring strategies.

Looking ahead, the editorial team signals that future newsletters will continue to spotlight novel abuse cases and provide actionable insights for defenders. Readers are encouraged to stay engaged with the ongoing discourse, share observations, and contribute to the collective effort to mitigate evolving malware threats.