Malware

Malware

Pegasus and NoviSpy Used Against Serbian Students: Zero-Click iPhone Attack Confirmed

Citizen Lab confirmed Pegasus zero-click iPhone infection via iMessage against Serbian student amid wider surveillance of activists with NoviSpy.

Sep 6, 202607:09 5 min readRead →

Malware

BraZetsu Turns Infected PCs into Access for Sale to Criminals

BraZetsu malware catalogs infected PCs and sells access via Infected Marketplace, enabling fraud, data theft and corporate intrusions.

Sep 6, 202603:09 6 min readRead →

Malware

ClickFix on the Blockchain: More Than 5,400 Compromised Sites Distribute Malicious Code

Over 5,400 WordPress and PrestaShop sites spread ClickFix malware via BNB Smart Chain EtherHiding, fake CAPTCHAs and WebRTC stagers.

Sep 5, 202617:08 6 min readRead →

Malware

Million-dollar phishing campaign uses invisible Unicode characters to bypass email filters

Microsoft tracked a million-message phishing campaign using invisible Unicode Tags to hide loan lures and bypass email filters.

Sep 5, 202601:09 5 min readRead →

Malware

Pegasus Hits Serbia’s Student Movement with a Zero-Click iMessage Exploit

Citizen Lab confirmed Pegasus zero-click iMessage compromise of Serbian student activist's iPhone, amid 14 spyware targets and NoviSpy Android cases.

Sep 3, 202617:09 5 min readRead →

Malware

StreamRat, the Android Trojan Spread Through Fake Streaming Ads on Meta

StreamRat is an Android trojan spread via fake streaming ads on Meta targeting Spain, using a dropper APK and Accessibility abuse for remote control.

Sep 2, 202621:09 5 min readRead →

Malware

U.S. Charges Russian Citizen in Phishing Campaign Using TVRAT and DarkVNC Against 80,000 Freelancers

U.S. charges Russian for phishing 80,000 freelancers via 255 fake accounts and Excel macros delivering TVRAT and DarkVNC for remote access and data theft.

Sep 2, 202619:09 5 min readRead →

Malware

Sality, the P2P botnet used to steal cryptocurrency, disrupted after 23 years

CrowdStrike and law enforcement disrupted the 23-year-old Sality P2P botnet, sinkholing bots and blocking payloads used for crypto theft via EggJagger.

Sep 2, 202615:09 5 min readRead →

Malware

TerminalFix Turns Fake CAPTCHAs into Tunnels into Corporate Networks

Microsoft's TerminalFix uses fake CAPTCHAs and PowerShell to deliver steganographic malware, creating encrypted tunnels into corporate networks.

Sep 1, 202603:12 6 min readRead →