Malware

Malware

SpyNote and WindRelay: the Android Attack Combining Fraudulent Loans and NFC Relay

Discover how Android users are targeted by SpyNote and WindRelay malware in a scam combining fraudulent loans and NFC relay for contactless fraud.

Aug 13, 202613:08 3 min readRead →

Malware

Two Malware Campaigns Target Banks and Cryptocurrency Payments

Gen Threat Labs reports two malware campaigns: one steals banking sessions, the other hijacks cryptocurrency payments via clipboard manipulation.

Aug 9, 202615:08 3 min readRead →

Malware

Root Backdoor in Zbtlink Routers: ENDLESSDOORS Enables Remote Control

Learn about ENDLESSDOORS, a backdoor in Zbtlink routers enabling remote root access. Critical risk discovered; protect your network with these indicators.

Aug 9, 202603:10 2 min readRead →

Malware

Cybersecurity: AI-Driven Threats Accelerate Across Scams, Backdoors, and Compromised Supply Chains

Explore how AI fuels scams, backdoors, and supply chain compromises in cybersecurity. Stay informed on emerging threats and real-world incidents.

Aug 8, 202601:08 3 min readRead →

Malware

ClickFix Targets macOS with an Infostealer Capable of Draining Crypto Wallets

ClickFix malware targets macOS users, stealing crypto wallets and credentials via social engineering and bypassing Gatekeeper.

Aug 7, 202607:11 2 min readRead →

Malware

XCSSET v40 Targets macOS Developers Through Compromised Xcode Projects

Palo Alto Networks Unit 42 has analyzed a new variant of XCSSET, dubbed v40 , which targets macOS developers through compromised Xcode projects and GitHub

Aug 4, 202621:11 2 min readRead →

Malware

ChainDrop: the npm Supply-Chain Attack That Compromised 1,300 Packages and Hit 2 Billion Monthly Downloads

The ChainDrop npm supply-chain attack compromised 1,300 packages. Learn how it stole tokens and spread across CI/CD and developer environments.

Aug 4, 202619:16 3 min readRead →

Malware

DOUBLECUP: the Russian service using browser cache to inject malware without touching the disk

DOUBLECUP is a Russian loader-as-a-service using fake CAPTCHAs, steganography, and browser cache to deploy fileless malware like CountLoader and RATs.

Aug 4, 202607:09 2 min readRead →

Malware

18 Malicious npm Packages Impersonate Alibaba Tools: Hunting a Cross-Platform RAT

18 malicious npm packages mimic Alibaba tools to drop a cross-platform RAT. Learn how this dependency confusion attack threatens developers via OS-specific payloads.

Aug 4, 202601:09 3 min readRead →