Fake Claude Mac installer ads hide behind Bing redirects to run ClickFix commands
Malicious Google ads show bing.com URLs to send Mac users to a fake Claude page pushing a ClickFix Terminal command; final payload unknown.
Malware
More news
Page 1 / 12 · 100 articles
Midnight Mimosa Turns Budget Android Devices Into Pre-Compromised Ad-Fraud Nodes
Bitdefender-reported Midnight Mimosa firmware malware in budget Android uses system privileges for ad-fraud payloads and reportedly evading Play Protect.
Fake Firefox Wallet Extensions Target Rabby and OKX Recovery Secrets
Report says 16 fake Firefox extensions posed as Rabby and OKX wallets to intercept recovery phrases during import for attacker transmission.
Ploutus ATM Cash-Out Case Brings Alleged Malware Engineer Before a US Court
Alleged Ploutus developer Anibal Canelon Aguirre arrested over $5.4M ATM jackpotting scheme targeting banks across 47 states and linked to TdA.
ClingSTUN Turns Compromised Linux Devices Into NAT-Traversing Proxies
ClingSTUN Linux backdoor uses STUN to bypass NAT, turns infected devices into proxies, persists via reboot and spreads with hardcoded exploits.
Fake Zoom Installer Uses CloudSyncD to Establish Persistent Access on Macs
Fake Zoom installer tricks Mac users into granting root access to install CloudSyncD backdoor for persistent control and follow-on payloads.
Android 17 Puts Accessibility Privileges Behind App Verification
Android 17 Advanced Protection limits Accessibility access to verified tools to block trojans and spyware abusing assistive APIs.
California Dismissal Leaves El Faro’s Pegasus Claims Before an Appeal
California judge dismissed El Faro journalists' Pegasus lawsuit against NSO Group on jurisdictional grounds. Knight Institute plans appeal.
WordPress Backdoor Uses Eight Recovery Points to Rebuild After Cleanup
WordPress SC backdoor rebuilds itself from 8 file, database and memory copies with Ethereum C2. Learn how it persists and how to clean it.