PamStealer Makes macOS Payload Recovery Depend on Its Command Server
New PamStealer macOS variant uses fake Wavel wallet, JXA-to-zsh chain and server-side X25519 decryption to deliver Swift password stealer.
Malware
More news
Page 3 / 12 · 100 articles
CARBONATO Turns Exposed Docker Hosts Into an AI-Assisted Credential Theft Network
CARBONATO exploits exposed Docker APIs to deploy privileged containers, persist via SSH, and use AI agent GH0ST to steal AI API keys.
ClickFix Turns Legitimate Websites and System Tools Into a Malware Delivery Chain
ClickFix tricks users into running malicious commands via fake Cloudflare checks, using 17,000+ infected sites, blockchain redirects and OS-specific lures.
RemControl Turns Fake IPTV Downloads Into Full Android Banking Surveillance
RemControl Android malware spreads via fake TVTap IPTV pages, stealing banking credentials with overlays, surveillance and remote control.
ChainScript RAT Turns Polygon Smart Contracts Into a Movable C2 Directory
ChainScript RAT spreads through fake software installers, uses Node.js and PowerShell, and finds replaceable C2 servers through Polygon smart contracts.
FBI Domain Seizures Cut Off NightmareStresser’s DDoS-for-Hire Storefront
FBI seized NightmareStresser domains in Operation PowerOFF, disrupting a DDoS-for-hire service linked to hundreds of thousands of attacks.
KREMLIN Malware Rewrites Chromium Trust Data to Hijack Brazilian Banking Sessions
KREMLIN malware installs rogue Chrome and Edge extensions by rewriting Chromium trust data to steal Brazilian banking credentials and session tokens.
Runtime-Triggered npm Malware Slips Past Install-Script Protections
A malicious npm campaign hides its payload in normal library functions, bypassing install-script controls and using runtime triggers, reconnaissance, and blockchain C2.
Inside TeamPCP: How Google Disrupted a Supply-Chain Campaign From the Hackers’ Core Chat
Google infiltrated TeamPCP’s inner chat to disrupt a supply-chain campaign, revoke stolen credentials, warn victims and uncover an AI-assisted zero-day exploit.