Cracked software is the bait but ViperSoftX is what’s waiting underneath. Arabic-speaking attackers are using torrents and pirated tools to deliver the malware to Korean users. ToddyCat has found a way in through the front door. ...
Read More
No malware alert pops up when it’s hiding behind a trusted name. Vidar Stealer is now being distributed by bundling itself with a legitimate Microsoft Sysinternals tool used widely in enterprise environments. Spyware strains MOON ...
Read More
CAPTCHAs are supposed to keep you safe - not lure you into a trap. A new campaign is using fake CAPTCHA challenges to push LegionLoader onto unsuspecting users. What looked like handy developer tools turned out to be miners in di ...
Read More
Ukrainian systems have come under fire in a series of coordinated cyberattacks. CERT-UA linked the incidents to WRECKSTEEL, a malware strain deployed against state agencies and critical infrastructure. Along with the tax season, ...
Read More
Not every dev email is what it seems. North Korean hackers are spoofing messages from a developer platform to deliver BeaverTail malware, along with a downloader, in a campaign that blends social engineering with targeted deliver ...
Read More
Like a chameleon slipping through the shadows, researchers reported an upgraded Hijack Loader now cloaking itself with call stack spoofing and anti-VM checks to dodge detection and dig deeper into compromised systems. Meanwhile, ...
Read More
It starts with a ZIP file and ends with your credentials gone. The latest version of KoiLoader arrives via phishing email and delivers Koi Stealer to harvest data. A new Android trojan, TsarBot, targets over 750 apps across multi ...
Read More
Whispers of espionage echo through the digital corridors as researchers revealed that the Earth Alux APT group has been wielding its VARGEIT backdoor to infiltrate government, tech, and retail sectors across Asia-Pacific and Lat ...
Read More
Backdoors are getting a custom fit for the network edge. Hackers are modifying open-source tools like J-Magic and TINYSHELL into stealthy implants tailored for network infrastructure. PJobRAT has reappeared - this time in Taiwan, ...
Read More
Researchers have identified a new ransomware strain named QWCrypt, believed to be operated by the long-active espionage group RedCurl. Known for years of corporate spying, RedCurl’s shift toward ransomware marks a notable change ...
Read More