Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode

The Hacker News 26 August 2026, 10:12 EEST Security

An independent malware researcher has documented a previously unreported Windows backdoor, dubbed SLEEPWALKER, that stays inert in memory until a specifically crafted network packet reaches the machine and then runs commands written in a 23-instruction language of its own design. The sample is an unsigned 64-bit Windows dynamic-link library (DLL) of 59,904 bytes, built to be side-loaded into&…

Read the full story on The Hacker News https://thehackernews.com/2026/08/newly-sleepwalker-backdoor-waits-for.html

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload The Hacker News
Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes The Hacker News
LACMA data breach last year exposed social security and medical data BleepingComputer
Hackers abuse npm mirrors to host phishing redirect pages BleepingComputer