The phishing campaign shows how attackers continue to weaponize legitimate cloud services and open source tools to evade ...
Active malware exploits DLL side-loading in a signed GitKraken binary to deliver trojans, stealers, and remote access malware ...
Researchers found a LinkedIn phishing campaign delivering a remote access trojan via DLL sideloading, WinRAR SFX files, and ...
ClickFix variant CrashFix relies on a malicious Chrome extension to crash the browser and trick victims into installing the ...
New WhatsApp Web attack spreads self-propagating ZIP files containing Astaroth banking malware through trusted conversations.
Officials of Ukraine's Defense Forces were targeted in a charity-themed campaign between October and December 2025 that ...
I stopped hunting installers and let one tool grab everything for me.
A worker searching for an adblocker ended up installing malware instead after threat actor KongTuke pushed a fake Chrome ...
Researchers studying cybersecurity have discovered a new and sophisticated phishing effort that spreads dangerous payloads ...
A phishing campaign targeting carefully selected “high-value” corporate employees has been using LinkedIn direct messages to deliver weaponized downloads, highlighting how criminals are shifting away ...
The Python-based information stealer SolyxImmortal uses legitimate APIs and libraries for stealthy data gathering and ...
Microsoft’s new winapp CLI simplifies Windows app development with one-command setup, faster testing, and easier packaging.