Malware

Malware

ValleyRAT Infiltrates Windows Through Signed Adware and Disables Security Defenses

ValleyRAT backdoor spreads via trojanized QN Wallpaper installer using DLL sideloading to disable Windows Defender and gain full remote control.

Aug 31, 202617:08 6 min readRead →

Malware

TerminalFix: Fake Cloudflare CAPTCHAs now use Windows Terminal to install a reverse-tunnel backdoor

Discover how TerminalFix malware uses fake Cloudflare CAPTCHAs to trick users into installing a reverse-tunnel backdoor via Windows Terminal, posing a serious threat to organizations.

Aug 31, 202611:17 4 min readRead →

Malware

Chrome and Edge Extensions Turned into Malware: 19 Modules to Steal Crypto, Seed Phrases, and Sessions

Discover how 19 malicious modules in Chrome and Edge extensions steal crypto, seed phrases, and sessions. Learn immediate steps to secure your accounts.

Aug 31, 202607:23 4 min readRead →

Malware

Claude Sessions Stolen by Infostealers: How Attackers Bypass Passwords and 2FA

Anthropic warns Claude users of infostealer malware stealing sessions, bypassing passwords and 2FA. Discover attack methods and protection tips.

Aug 31, 202603:28 4 min readRead →

Malware

Heart of TeamPCP Arrested in Australia: Thousands of Companies Hit via Open Source

Australian police arrest cybercriminals behind open-source attacks affecting thousands of companies globally via malicious tools.

Aug 27, 202615:18 6 min readRead →

Malware

SLEEPWALKER, the backdoor that implants itself in the ESET agent and listens for a "magic packet"

SLEEPWALKER is a Windows backdoor that side-loads into ESET agents, listens for encrypted magic packets, and uses multiple transports. No patch exists; mitigation requires IOCs and incident response.

Aug 26, 202619:16 4 min readRead →

Malware

WeedHack survives the takedown: fake Minecraft sites still spreading infostealer

WeedHack malware spreads via fake Minecraft sites post-takedown. Learn about tactics, risks, and protection tips from McAfee.

Aug 25, 202611:15 4 min readRead →

Malware

ToxicPanda 2.0: The Android Banking Trojan Now Targeting Corporate Identity

ToxicPanda 2.0 Android trojan evolves to target corporate identities, using lock screen overlays and backdoors to steal data and gain control.

Aug 25, 202607:16 6 min readRead →

Malware

Fake 113 GB GTA VI leak disables Windows Defender: how cybercriminals exploit the hype

A fake 113 GB GTA VI leak contains malware that disables Windows Defender. Learn how cybercriminals exploit hype and avoid traps.

Aug 25, 202605:19 3 min readRead →