Nimbus Manticore uses trojanized coding challenges to deploy NodeRabbit and PollCat RATs across Windows, Linux, and macOS.

Mirage2FA uses AiTM phishing to steal Microsoft 365 credentials and authenticated sessions, bypassing conventional MFA and ...

Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect ...

Uh-oh, e-commerce giant AliExpress has been caught running hidden, silent audio processes inside visitors' browsers to generate unique device tracking profiles without user consent.

The campaign uses EtherHiding to dynamically update its command-and-control server, using the blockchain as an ...

WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader uses Teams phishing to steal Windows login ...

The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. A critical-severity type ...

A malware-as-a-service (MaaS) campaign has combined ClickFix social engineering with the ErrTraffic delivery service and ...

Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

In a statement released today, the Australian Federal Police (AFP) said two unnamed suspects from Western Australia, aged 21 ...

Both the moderators and Indy Chamber President Matt Mindrum noted the increased attention the office has received this ...

Cybersecurity researchers have uncovered 24 malicious npm packages that abuse package mirror services to host obfuscated ...