Introduction

In early August 2025, cybersecurity teams in Türkiye uncovered a new Java-based malware loader named SoupDealer. This malware managed to evade detection by all public sandboxes, antivirus solutions, and enterprise EDR/XDR platforms. It was part of a phishing campaign targeting Turkish users, distributing a three-stage loader via files named 'TEKLIFALINACAKURUNLER.jar'.

Introduction

The cybersecurity landscape is constantly evolving, with new threats emerging that target vulnerabilities in popular software and exploit advanced evasion techniques. In this article, we delve into two significant cyber threats: the macOS vulnerability in Speedify VPN and the Windows-targeting malware known as Raspberry Robin. These threats underscore the importance of staying vigilant against cyber attacks and the critical need for software updates to mitigate risks effectively.