700+ sites including Harvard and DuckDuckGo delivered malware via fake Cloudflare Pages. Two rival criminal gangs fought over the compromised domains.
Bitsight uncovers Operation Fuyao, a malware campaign turning cheap Android TV boxes into ad fraud nodes and SOCKS5 proxies, linked to Zhejiang Fengwo.
Google Chrome is adding a feature to block malicious extensions forced via local policies that hijack browsers and display managed by your organization.
The Flying Eagle Android RAT creates variants like Night Dragon after a source code leak. It steals credentials and hijacks devices via fake police apps.
A supply chain attack on Adform injected malicious ad scripts into websites, silently stealing cryptocurrencies by hijacking user clipboards.
Silver Fox targets Japanese manufacturing with a 3-driver BYOVD chain to deploy ValleyRAT. Learn about this cyber threat, attack methods, and mitigations.
Arch Linux halted AUR package adoption after malicious actors exploited the system to distribute a two-stage infostealer and RAT malware.
A spear-phishing campaign targeted an Italian law firm, deploying the HollowFrame loader and Matryoshka backdoor via DLL side-loading and GitHub as C2.
Tengu, a new Mirai-based Linux botnet, abuses hardware watchdogs and multi-layered persistence to remain nearly impossible to eradicate from devices.