MalwareThe ChainDrop npm supply-chain attack compromised 1,300 packages. Learn how it stole tokens and spread across CI/CD and developer environments.
MalwareDOUBLECUP is a Russian loader-as-a-service using fake CAPTCHAs, steganography, and browser cache to deploy fileless malware like CountLoader and RATs.
Malware18 malicious npm packages mimic Alibaba tools to drop a cross-platform RAT. Learn how this dependency confusion attack threatens developers via OS-specific payloads.
Malware700+ sites including Harvard and DuckDuckGo delivered malware via fake Cloudflare Pages. Two rival criminal gangs fought over the compromised domains.
MalwareBitsight uncovers Operation Fuyao, a malware campaign turning cheap Android TV boxes into ad fraud nodes and SOCKS5 proxies, linked to Zhejiang Fengwo.
MalwareGoogle Chrome is adding a feature to block malicious extensions forced via local policies that hijack browsers and display managed by your organization.
MalwareThe Flying Eagle Android RAT creates variants like Night Dragon after a source code leak. It steals credentials and hijacks devices via fake police apps.
MalwareA supply chain attack on Adform injected malicious ad scripts into websites, silently stealing cryptocurrencies by hijacking user clipboards.
MalwareSilver Fox targets Japanese manufacturing with a 3-driver BYOVD chain to deploy ValleyRAT. Learn about this cyber threat, attack methods, and mitigations.