Technology GitHub comments abused to push malware via Microsoft repo URLs Apr 20, 2024 bleepingcomputer.com A GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with…
Technology Fake cheat lures gamers into spreading infostealer malware Apr 18, 2024 bleepingcomputer.com A new info-stealing malware linked to Redline poses as a game cheat called 'Cheat Lab,' promising downloaders a free copy if they…
Cyber Security Organizations Are Shifting Ransomware Defense Tactics, But Malware Is Still the Problem Mar 30, 2024 cyberdefensemagazine.com By Trevor Hilligoss, Senior Director of Security Research at SpyCloud Ransomware attacks are a fact of life – over 72% of global…
Technology New IDAT loader version uses steganography to push Remcos RAT Feb 26, 2024 bleepingcomputer.com A hacking group tracked as 'UAC-0184' was observed utilizing steganographic image files to deliver the Remcos remote access trojan (RAT)…
Technology Atomic Stealer malware strikes macOS via fake browser updates Nov 25, 2023 bleepingcomputer.com The 'ClearFake' fake browser update campaign has expanded to macOS, targeting Apple computers with Atomic Stealer (AMOS) malware. [...]
Technology Google ads push malicious CPU-Z app from fake Windows news site Nov 9, 2023 bleepingcomputer.com A threat actor has been abusing Google Ads to distribute a trojanized version of the CPU-Z tool to deliver the Redline…
Cyber Security Evasive Jupyter Infostealer Campaign Showcases Dangerous Variant Nov 8, 2023 darkreading.com The attacks are another manifestation of the concerning rise in information stealers for harvesting data and enabling persistent access to…
Technology Russian-speaking threat actor “farnetwork” linked to 5 ransomware gangs Nov 8, 2023 bleepingcomputer.com The operator of the Nokoyawa ransomware-as-a-service (RaaS), a threat actor known as 'farnetwork', built experience over the years by helping the JSWORM, Nefilim, Karma,…
Technology Discord will switch to temporary file links to block malware delivery Nov 4, 2023 bleepingcomputer.com Discord will switch to temporary file links for all users by the end of the year to block attackers from…
Technology Fake Corsair job offers on LinkedIn push DarkGate malware Oct 20, 2023 bleepingcomputer.com A threat actor is using fake LinkedIn posts and direct messages about a Facebook Ads specialist position at hardware maker Corsair…
GitHub comments abused to push malware via Microsoft repo URLs
A GitHub flaw, or possibly a design decision, is being abused by threat actors to distribute malware using URLs associated with…
Fake cheat lures gamers into spreading infostealer malware
A new info-stealing malware linked to Redline poses as a game cheat called 'Cheat Lab,' promising downloaders a free copy if they…
Organizations Are Shifting Ransomware Defense Tactics, But Malware Is Still the Problem
By Trevor Hilligoss, Senior Director of Security Research at SpyCloud Ransomware attacks are a fact of life – over 72% of global…
New IDAT loader version uses steganography to push Remcos RAT
A hacking group tracked as 'UAC-0184' was observed utilizing steganographic image files to deliver the Remcos remote access trojan (RAT)…
Atomic Stealer malware strikes macOS via fake browser updates
The 'ClearFake' fake browser update campaign has expanded to macOS, targeting Apple computers with Atomic Stealer (AMOS) malware. [...]
Google ads push malicious CPU-Z app from fake Windows news site
A threat actor has been abusing Google Ads to distribute a trojanized version of the CPU-Z tool to deliver the Redline…
Evasive Jupyter Infostealer Campaign Showcases Dangerous Variant
The attacks are another manifestation of the concerning rise in information stealers for harvesting data and enabling persistent access to…
Russian-speaking threat actor “farnetwork” linked to 5 ransomware gangs
The operator of the Nokoyawa ransomware-as-a-service (RaaS), a threat actor known as 'farnetwork', built experience over the years by helping the JSWORM, Nefilim, Karma,…
Discord will switch to temporary file links to block malware delivery
Discord will switch to temporary file links for all users by the end of the year to block attackers from…
Fake Corsair job offers on LinkedIn push DarkGate malware
A threat actor is using fake LinkedIn posts and direct messages about a Facebook Ads specialist position at hardware maker Corsair…