When a Browser Add-On Crosses the Line Into Host Control

A malicious Edge extension linked to a Python backdoor shows how native messaging can turn a browser convenience feature into a bridge toward endpoint-level abuse.

InvisibleFerret’s New Mask: Python Malware Compiled Into Binary Modules

A familiar Python backdoor is being repackaged as loadable extension modules, a move that can make source-based inspection harder and push defenders toward behavior-first detection.

Python’s Phantom: How Hackers Slip Past Defenses with the DEEP#DOOR Backdoor

Behind the Curtain: How Kimsuky’s Evolving LNK Chains Outsmart Windows Defenses

North Korea’s Kimsuky group revamps its multi-stage attack chain, weaponizing Windows shortcuts and cloud channels to deliver Python backdoors undetected.

Elephant Group Launches Defense Sector Attacks Using MSBuild-Delivered Python Backdoor