Malware

Malware

Hijacked HBO Max Reddit Account Pushed 108 ClickFix Malware Ads

Hackers hijacked HBO Max's verified Reddit account to post 108 ClickFix ads targeting Windows and macOS users with credential stealers and crypto malware.

Sep 14, 202621:48 5 min readRead →

Malware

Malicious Twitch Extension Exposed OAuth Tokens From Nearly 31,000 Users

Twitch Enhanced Viewer extension sent users' OAuth tokens to JeetBot proxies, exposing nearly 31,000 Chrome and Firefox users to account takeover.

Sep 14, 202609:31 5 min readRead →

Malware

GoldFactory Clones Android Banking Apps to Evade Fraud Controls in Indonesia

GoldFactory uses Gigabud and Vwork to clone Indonesian banking apps inside Android Work Profiles, evading fraud controls and causing $1M losses.

Sep 11, 202607:45 6 min readRead →

Malware

Deceptive Android Apps Exploit Google Play Early Access to Hide User Warnings

Thousands of deceptive Android applications are abusing Google Play’s Early Access program to attract installs without exposing users to public reviews or

Sep 11, 202604:05 6 min readRead →

Malware

Mantax Otax Android Malware Encrypts Files, Spies on Victims, and Weaponizes Harassment

Mantax Otax Android malware encrypts files on Android 9 or older, steals SMS, screen data, and harasses victims. Distributed via APKs outside Google Play.

Sep 11, 202601:55 6 min readRead →

Malware

U.S. Disrupts Xinbi Guarantee, Freezing $52.8 Million Tied to Global Scam Networks

U.S. authorities seize Telegram channels and crypto wallets, freeze $52.8M in USDT, and sanction Xinbi Guarantee, a marketplace enabling pig-butchering scams.

Sep 10, 202614:04 6 min readRead →

Malware

Hackers Target F5 BIG-IP APM Systems With a Fileless Linux Web Shell

Hackers compromise F5 BIG-IP APM with fileless Linux rootkit injecting a memory-resident web shell, evading file scans. Vector unknown.

Sep 9, 202603:52 5 min readRead →

Malware

PEEP Turns Chrome and Edge Into Persistent Backdoors After a Host Breach

PEEP is a post-exploitation framework that turns Chrome and Edge into persistent backdoors to steal cookies, monitor browsing, and run OS commands.

Sep 8, 202603:28 6 min readRead →

Malware

REVSTEALER-Linked Windows Malware Persists to Steal Crypto, Relay Traffic, and Mine Coins

Elastic links four persistent Windows executables to REVSTEALER that steal crypto wallets, hijack clipboards, proxy traffic, and mine coins.

Sep 6, 202613:38 6 min readRead →