New Malware Spread via FTP Server Banners

Hackers have developed a new method to spread malware via FTP servers. These attacks utilize the banners of FTP servers to transmit hidden commands that activate two previously unknown Remote Access Trojans (RATs) named E4del and PINHOLE. The discovery of this malware occurs in a context where cyberattacks are becoming increasingly sophisticated. The E4del and PINHOLE malware are not yet documented and pose a serious threat to Windows systems. Security researchers have found that the attackers manipulate the banners of FTP servers to disguise the malicious commands.

This technique allows attackers to install the malware unnoticed, making detection by conventional security solutions more difficult. The use of FTP server banners for malware distribution is a relatively new trend. Researchers have discovered that the banners are often not adequately monitored, making them an attractive target for cybercriminals. This allows attackers to hide their commands in a seemingly harmless context, increasing the likelihood that users will unknowingly click on the malicious links. The E4del and PINHOLE malware can gain extensive control over infected systems.

After installation, they enable attackers to access confidential data, monitor activities, and carry out further malicious actions. This type of malware can infiltrate corporate networks and cause significant damage. The security community has already responded to this threat. Companies are strongly advised to review their FTP servers and ensure that the banners cannot be manipulated. Additionally, security solutions should be updated to improve the detection of such attacks.

Implementing additional security measures, such as firewalls and Intrusion Detection Systems, is recommended. The discovery of this malware occurs during a period of increasing cyberattacks worldwide. According to the Cybersecurity Report 2026, there has been a 35% increase in attacks compared to the previous year. This rise underscores the need for companies to revise and strengthen their security protocols. Researchers warn that attackers may also exploit other vulnerabilities in FTP servers.

The combination of insufficient monitoring and the ability to spread malware via banners could lead to a wave of attacks. Therefore, companies should take proactive measures to protect their systems. The E4del and PINHOLE malware are part of a larger trend where cybercriminals use innovative techniques to carry out their attacks. Security research will continue to be pursued intensively to identify and combat new threats early. The discovery of this malware could also lead to further investigations to better understand the backgrounds and dissemination patterns.

Security authorities have already begun investigating the spread of this malware. Initial reports suggest that the attackers may be operating from specific regions, which could facilitate investigations. However, the exact origin of the attacks remains unclear and is still being analyzed. The discovery of E4del and PINHOLE highlights the importance of continuously reviewing and adjusting security practices. Companies should regularly conduct training for their employees to raise awareness of cyber threats.

An informed employee can often be the first line of defense against such attacks. The vulnerability created by the use of FTP server banners could lead to further attacks in the future if appropriate measures are not taken. Experts recommend that companies regularly check their systems for vulnerabilities and ensure that all software is up to date. Continuous monitoring and adjustment of security strategies are crucial to address the ever-evolving threats. The E4del and PINHOLE malware were first discovered in August 2026, and the security community is working intensively to minimize the impact of this threat.