Fake Zoom Installer Uses CloudSyncD to Establish Persistent Access on Macs
Fake Zoom installer tricks Mac users into granting root access to install CloudSyncD backdoor for persistent control and follow-on payloads.
Malware
More news
Page 3 / 13 · 113 articles
Android 17 Puts Accessibility Privileges Behind App Verification
Android 17 Advanced Protection limits Accessibility access to verified tools to block trojans and spyware abusing assistive APIs.
California Dismissal Leaves El Faro’s Pegasus Claims Before an Appeal
California judge dismissed El Faro journalists' Pegasus lawsuit against NSO Group on jurisdictional grounds. Knight Institute plans appeal.
WordPress Backdoor Uses Eight Recovery Points to Rebuild After Cleanup
WordPress SC backdoor rebuilds itself from 8 file, database and memory copies with Ethereum C2. Learn how it persists and how to clean it.
Popular Chrome Ad Blocker Accused of Secretly Harvesting Browsing and AI Chat Data
Poper Blocker, a Chrome extension with 2M users, accused of harvesting browsing history, AI chats, and screenshots via remote commands.
Fake Google Play Portals Deliver Corp MDM Spyware to Logistics Companies
Fake Google Play sites posing as logistics brands spread Corp MDM spyware stealing SMS codes and enabling call forwarding via 30-second C2 heartbeats.
Fake CAPTCHA Pushes Psychedelic Stealer Through Compromised Ukrainian Websites
Compromised Ukrainian sites show fake Cloudflare CAPTCHA that tricks users into running msiexec to install Psychedelic Stealer stealing logins and wallets.
MacSync Turns Public iCloud Calendars Into a Malware Delivery Channel
MacSync malware abuses iCloud calendars to deliver macOS payloads via fake apps, stealing credentials, wallets and deploying a Finder backdoor.
Trusted Interfaces Turn Hostile Across Banking, AI, Industrial Systems and Software Updates
Attackers exploit banking apps, AI answers, Google sign-in and ICS access. Learn how RemControl, Z.ai, MAX and fake support scams abuse trusted interfaces.