Amatera: How the prolific infostealer works and spreads

ESET’s October 2026 security content covers active malware and threat activity, including the Amatera infostealer, UAC-0099/MATCHBOIL campaigns, the MythicRatatoskr backdoor used in a destructive attack against a Ukrainian grain firm, and the SparroWocky backdoor associated with FamousSparrow. It also highlights critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, UEFI Secure Boot bypass risks, phishing and quishing, scams, AI-enabled abuse, and broader APT and threat-landscape trends. The collection indicates significant risk from credential theft, espionage, destructive attacks,