TF-MAL-osx.imuler

Description

ThreatFox malware family `osx.imuler`. Printable name: iMuler. Aliases: Revir.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Grok and Mixtral AI Models Hijacked by WormGPT Clones via Pr
  web:androidexperto.com

  WormGPT-style clones are again drawing attention after allegations that malicious operators used prompt jailbreaks to manipulate AI systems built on or connected to Grok and Mixtral- family models. The reported activity reflects a growing abuse pattern: attackers do not always need to compromise model infrastructure directly when they can pressure, disguise, or reframe prompts in ways that push ...

  2026-05-22 05:28 UTC
• Detecting and Explaining Malware Family Evolution Using Rule-Based ...
  web:arxiv.org

  Interpretable models are especially important in ad-versarial domains such as malware analysis, where understanding the rationale behind a classification can guide remediation efforts and enhance model robust-ness. This paper proposes a novel approach for detect-ing and explaining concept drift in malware families over time.

  2026-05-22 05:28 UTC
• Securing IoT Malware Classifiers: Dynamic Trigger-Based Attack and ...
  web:ieeexplore.ieee.org

  The evolution of IoT malware has ignited interest in the creation of malware family classification models. Nonetheless, these models encounter security concerns stemming from issues related to their interpretability and vulnerabilities exposed within the training pipeline. Recent research highlighted the limitations of learning-based malware classifiers, which are susceptible to backdoor ...

  2026-05-22 05:28 UTC
• iMuler (Malware Family) - Fraunhofer
  web:malpedia.caad.fkie.fraunhofer.de

  The threat was a multi-stage malware displaying a decoy that appeared to the victim as a Chinese language article on the long-running dispute over the Diaoyu Islands; an array of erotic pictures; or images of Tibetan organisations. It consisted of two stages: Revir was the dropper/downloader and Imuler was the backdoor capable of the following operations: - capture screenshots - exfiltrate ...

  2026-05-22 05:28 UTC
• RESURGE Malware and CVE-2025-0282: Critical Threats and Defender ...
  web:windowsforum.com

  The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .

  2026-05-22 05:28 UTC
• Malware Incident Response: The 7-Step Playbook for 2025 - Breachsense
  web:www.breachsense.com

  Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  2026-05-22 05:28 UTC
• Technical Approaches to Uncovering and Remediating Malicious ... - CISA
  web:www.cisa.gov

  It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  2026-05-22 05:28 UTC
• Backdoor:OSX/Imuler.A | F-Secure
  web:www.f-secure.com

  Summary Backdoor:OSX/ Imuler .A contacts a remote server for instructions; it may then steal files or capture a screenshot of the infected computer system, which is then forwarded to the remote server.

  2026-05-22 05:28 UTC
• A hierarchical deep learning framework with doubly regularized loss for ...
  web:www.nature.com

  This study proposes a hierarchical deep learning framework for Portable Executable (PE) malware detection and family categorization, underpinned by a novel Doubly Regularized Binary Cross-Entropy ...

  2026-05-22 05:28 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  This guidance helps private and public sector organisations deal with the effects of malware (which includes ransomware). It provides actions to help organisations prevent a malware infection, and also steps to take if you're already infected. Following this guidance will reduce: the likelihood of becoming infected the spread of malware throughout your organisation the impact of the infection

  2026-05-22 05:28 UTC

Only Available for Registered Users. Sign in to view.