Elastic Security Labs has identified a new malware named SHELBY that targets Iraqi telecoms using a phishing attack. The malware has two components, SHELBYLOADER and SHELBYC2, that utilize GitHub commits for command-and-control operations, mimicking legitimate activity and complicating detection. SHELBY uses Personal Access Tokens (PATs) for unauthorized control over infected systems. Although the malware is still under development, it poses a significant security risk.

When AI Fights Back: Simbian’s 2025 Hackathon Challenges Humans to Outsmart the Machines
Simbian, under CEO Ambuj Kumar, is hosting an AI Hackathon on April 8, 2025, offering participants a unique cybersecurity challenge. Simbian’s AI SOC agent will