A new ClickFix social engineering campaign is targeting the hospitality sector in Europe, using fake Windows Blue Screen of ...

Transparent Tribe (APT36) is linked to new cyber-espionage attacks using malicious LNK files, adaptive RATs, and long-term ...

More than 54 malicious APK samples have been identified, many disguised as legitimate financial or payment apps. Once ...

A new wave of the GlassWorm malware is now targeting macOS developers by hiding malicious code inside fake Visual Studio Code ...

RondoDox botnet exploits the React2Shell vulnerability in Next.js, with over 90,000 exposed systems used to deploy miners and ...

Securonix is detailing a multi-stage campaign that starts with a bogus Booking.com message that runs through a ClickFix technique and a fake Blue Screen of Death before dropping the DCRat malware that ...

TL;DR Introduction Infostealers are not new malware. They have been around for decades. What has changed is how effective ...

A sophisticated malware known as Ghost Tap is now said to be behind a notable increase in fraudulent contactless payments.

The zero-day exploitations of Ivanti's MDM platform meant unprecedented pwning of 1000s of orgs by a Chinese APT — and ...

Threat actors used two malicious Chrome extensions that have 900,000 users to steal their chats with AI models like ChatGPT ...

Kaspersky has released new research findings on a sophisticated cyber espionage campaign by the Evasive Panda threat actor.

Recent attacks are targeting Next.js servers and pose a significant threat of cryptomining and other malicious activity to ...