The phishing campaign shows how attackers continue to weaponize legitimate cloud services and open source tools to evade ...
Active malware exploits DLL side-loading in a signed GitKraken binary to deliver trojans, stealers, and remote access malware ...
Researchers found a LinkedIn phishing campaign delivering a remote access trojan via DLL sideloading, WinRAR SFX files, and ...
ClickFix variant CrashFix relies on a malicious Chrome extension to crash the browser and trick victims into installing the ...
New WhatsApp Web attack spreads self-propagating ZIP files containing Astaroth banking malware through trusted conversations.
Officials of Ukraine's Defense Forces were targeted in a charity-themed campaign between October and December 2025 that ...
A worker searching for an adblocker ended up installing malware instead after threat actor KongTuke pushed a fake Chrome ...
Researchers studying cybersecurity have discovered a new and sophisticated phishing effort that spreads dangerous payloads ...
A phishing campaign targeting carefully selected “high-value” corporate employees has been using LinkedIn direct messages to deliver weaponized downloads, highlighting how criminals are shifting away ...
The Python-based information stealer SolyxImmortal uses legitimate APIs and libraries for stealthy data gathering and ...
A new malicious campaign mixes the ClickFix method with fake CAPTCHA and a signed Microsoft Application Virtualization (App-V ...
ReactOS, which many refer to as the "open source version of Windows" has reached its 30th birthday. Development on the free ...