A New 'It RAT': Stealthy 'Resolver' Malware Burrows In

A new infostealer on the market is making big waves globally, replacing Lumma et al. in attacks and employing so many stealth, persistence, and anti-analysis tricks that it's downright difficult to count them all

Apr. 15, 2025 Signup

Daily Edition

Today’s news and insights for cybersecurity professionals

- Today's News and Features -

TOP STORY

A New 'It RAT': Stealthy 'Resolver' Malware Burrows In‎‎ A new infostealer on the market is making big waves globally, replacing Lumma et al. in attacks and employing so many stealth, persistence, and anti-analysis tricks that it's downright difficult to count them all.‎‎ Keep Reading →

Fortinet Zero-Day Bug May Lead to Arbitrary Code Execution‎‎ A threat actor posted about the zero-day exploit on the same day that Fortinet published a warning about known vulnerabilities under active exploitation.‎‎

AI Code Tools Widely Hallucinate Packages‎‎ The hallucination problem is not just pervasive, it is persistent as well, according to new research.‎‎

Chinese APTs Exploit EDR 'Visibility Gap' for Cyber Espionage‎‎ Blind spots in network visibility, including in firewalls, IoT devices, and the cloud, are being exploited by Chinese state-backed threat actors with increasing success, according to new threat intelligence. Here's how experts say you can get eyes on it all.‎‎

Threat Intel Firm Offers Crypto in Exchange for Dark Web Accounts‎ Prodaft is currently buying accounts from five Dark Web forums and offers to pay extra for administrator or moderator accounts. The idea is to infiltrate forums to boost its threat intelligence.‎

THE EDGE

Experts Optimistic About Secure by Design Progress‎ Secure by Design is an important step to reduce the number of vulnerabilities present originally, but is it progressing fast enough? According to security experts Chris Wysopal and Jason Healey, the landscape is improving.‎

DR TECHNOLOGY

AuthZEN Aims to Harmonize Fractured Authorization Controls‎ Managing permissions and authorizations across dozens or hundreds of cloud services and platforms poses significant headaches for companies. An open specification aims to change that.‎

SPONSORED ARTICLE

Is Threat Intelligence Just for Big Organizations?‎‎ Threat intelligence is essential for a wide range of proactive and reactive cybersecurity strategies in organizations of all sizes.‎‎

Read More →

- Commentary -

Opinions from thought leaders around the cybersecurity industry

7 RSAC 2025 Cloud Security Sessions You Don't Want to Miss‎‎ Some of the brightest minds in the industry will discuss how to strengthen cloud security.‎‎

Using Third-Party ID Providers Without Losing Zero Trust‎‎ With $4.4 billion in worldwide data breach fines in 2024, the cost of not knowing who's walking into your systems is devastating.‎‎

More Commentary →

- Upcoming Events -

Apr 15, 2025 My Server is Secure. Why Should I Bother about my Mobile App?

Apr 16, 2025 VPNs, RMMs, and Beyond: How Are Attackers Adapting?

Aug 2, 2025 [Conference] Black Hat USA - August 2-7 - Learn More

More Events →

- More Resources -

WHITE PAPER SMB Cyber Survival Guide

WHITE PAPER Driving the Future of Work Through Enterprise-Wide SASE

WHITE PAPER The State of Asset Security: Uncovering Alarming Gaps & Unexpected Exposures

REPORT Zero-Trust Adoption Driven by Data Protection, Cloud Access Control, and Regulatory Compliance Requirements

More Resources →

- Elsewhere in Cyber Today -

FORTRA TRIPWIRE

Energy Under Siege: How the Industry is Fighting Against Cyber Attacks

TREND MICRO

BPFDoor’s Hidden Controller Used Against Asia, Middle East Targets

TRUSTWAVE

Proton66 Part 1: Mass Scanning and Exploit Campaigns

- Do You Find Today’s Newsletter Helpful? -

Yes Not sure No

You received this message because you are subscribed to Dark Reading's Daily newsletter. If a friend forwarded you this message, sign up here to get it in your inbox. Thoughts about this newsletter? Give us feedback.

Advertise With Us | Privacy Policy | Unsubscribe Copyright © 2025 TechTarget, Inc. or its subsidiaries. All rights reserved. Operated by TechTarget, Inc. and its subsidiaries, 275 Grove Street, Newton, Massachusetts, 02466 US