🧰 ClamAV

The items that name it 11

• ESET Research (@ESETresearch) on X
  threadas affected products2026-10-30
• A quiet week in infosec <.<
  articleas tools2026-10-29

  Signature provided by Talos to detect NIK C2

• NIK C2: The new AI-enabled command-and-control framework
  writeupas classification.technologies2026-10-29
• The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
  articleas tools2026-10-15It is written here as ClamAV (signatures to detect UAT-6275 threat, per the full Talos blog post).

  signatures to detect UAT-6275 threat, per the full Talos blog post

• UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
  writeupas tools2026-10-08

  Antivirus signature detection

• China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor
  writeupas tools2026-09-30

  Antivirus signatures provided to detect and block this threat (e.g., Html.Trojan.UAT-11587-10060367-2, Win.Trojan.UAT-11587-10060365-1 through -10060384-1, Txt.Trojan.UAT-11587-10060385-5/-10060386-1)

• ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
  writeupas tools2026-09-08

  Signature-based detection; specific signatures Win.Backdoor.BadDav-10060502-0, Win.Backdoor.GoProxShell-10060503-0, Win.Malware.AmateraStomper-10060507-0, Win.Backdoor.BadNetSup-10060508-0, Js.Downloader.ClickFix-10060510-0 released to detect/block this threat

• UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
  writeupas tools2026-08-20

  Antivirus signatures provided for detection: Py.Loader.Tool-10060293-1, Py.Loader.Tool-10060293-2, Win.Malware.Generic-10060228-0, Win.Loader.Downloader-10060287-1

• Awesome Malware Analysis
  repoas tools2026-07-31

  Open source antivirus engine

• mthcht/awesome-lists
  repoas classification.technologies2026-06-10
• Today I Learned - Instrument ClamAV to extract AutoIT scripts
  writeupas tools2024-06-09

  Open-source antivirus engine; instrumented with --leave-temps and --tempdir flags to extract AutoIT scripts from scanned binaries via its temporary extraction files