MacSync Turns Public iCloud Calendars Into a Malware Delivery Channel
MacSync malware abuses iCloud calendars to deliver macOS payloads via fake apps, stealing credentials, wallets and deploying a Finder backdoor.
Malware
More news
Page 2 / 11 · 97 articles
Trusted Interfaces Turn Hostile Across Banking, AI, Industrial Systems and Software Updates
Attackers exploit banking apps, AI answers, Google sign-in and ICS access. Learn how RemControl, Z.ai, MAX and fake support scams abuse trusted interfaces.
Malicious Google Ads Turn Browser Tricks Into Cross-Platform Tech-Support Fraud
Malicious Google Ads sent Windows and macOS users to browser lockers mimicking system infections to push fake support calls across 619 organizations.
Lunex Turns a Flawed AMD Driver Into a Stealth Layer for Browser and Wallet Theft
Lunex campaign uses fake Cloudflare checks and MSI installers to deploy LunexLoader, abuse AMD driver CVE-2023-20598, and steal browser and wallet data.
x47.c Botnet Turns Stolen AI Keys Into a Direct Financial Attack
x47.c botnet by WraithTools uses stolen OpenAI and xAI keys to drain AI credits, with DDoS, theft and proxy features.
Restored GitHub Actions Repositories Briefly Revived a Dormant Supply-Chain Payload
Two compromised actions-cool GitHub Actions were restored Sept 16, reviving Mini Shai-Hulud malware via mutable tags, risking CI credential theft.
PamStealer Makes macOS Payload Recovery Depend on Its Command Server
New PamStealer macOS variant uses fake Wavel wallet, JXA-to-zsh chain and server-side X25519 decryption to deliver Swift password stealer.
CARBONATO Turns Exposed Docker Hosts Into an AI-Assisted Credential Theft Network
CARBONATO exploits exposed Docker APIs to deploy privileged containers, persist via SSH, and use AI agent GH0ST to steal AI API keys.
ClickFix Turns Legitimate Websites and System Tools Into a Malware Delivery Chain
ClickFix tricks users into running malicious commands via fake Cloudflare checks, using 17,000+ infected sites, blockchain redirects and OS-specific lures.