SlippyNunchucks hijacks Sogou Input Method’s brand promotion mechanism to distribute malware

ESET WeLiveSecurity’s October–November 2026 feed covers active malware campaigns, APT activity, infostealers, backdoors, phishing and scams, software vulnerabilities, supply-chain risks, and AI-related threats. Notable reporting includes SlippyNunchucks abusing insecure HTTP in Sogou Input Method, Gorbag intelligence collection against Ukrainian organizations, the MythicRatatoskr backdoor used in a destructive Ukraine-focused operation, MATCHBOIL activity by UAC-0099, Amatera infostealer distribution, and critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619.