A ClickFix campaign has shifted from tricking users into running commands on their computers to persuading them to inject ...
JSCeal can steal browser credentials, replay Google sessions using stolen cookies, and modify traffic for cryptocurrency ...
A few days ago I saw a screenshot on X of someone talking to what looks like a McDonald's support chatbot.They wanted to ...
A large-scale phishing campaign used fake voicemail SVG attachments to bypass email defenses, targeting 5527 organizations ...
A hacking group is targeting developers with fake coding challenges that hide cross-platform malware, infecting Windows, ...
Nimbus Manticore uses trojanized coding challenges to deploy NodeRabbit and PollCat RATs across Windows, Linux, and macOS.
Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...
Cisco Systems Inc.’s Talos Threat Intelligence group today detailed two ClickFix campaigns that push the technique past the ...
JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced ...
The campaign uses EtherHiding to dynamically update its command-and-control server, using the blockchain as an ...
The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. Although the threat actor has targeted government ...
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply ...