The phishing campaign shows how attackers continue to weaponize legitimate cloud services and open source tools to evade ...
Active malware exploits DLL side-loading in a signed GitKraken binary to deliver trojans, stealers, and remote access malware ...
Researchers found a LinkedIn phishing campaign delivering a remote access trojan via DLL sideloading, WinRAR SFX files, and ...
ClickFix variant CrashFix relies on a malicious Chrome extension to crash the browser and trick victims into installing the ...
New WhatsApp Web attack spreads self-propagating ZIP files containing Astaroth banking malware through trusted conversations.
Officials of Ukraine's Defense Forces were targeted in a charity-themed campaign between October and December 2025 that ...
I stopped hunting installers and let one tool grab everything for me.
A worker searching for an adblocker ended up installing malware instead after threat actor KongTuke pushed a fake Chrome ...
Researchers studying cybersecurity have discovered a new and sophisticated phishing effort that spreads dangerous payloads ...
A phishing campaign targeting carefully selected “high-value” corporate employees has been using LinkedIn direct messages to deliver weaponized downloads, highlighting how criminals are shifting away ...
The Python-based information stealer SolyxImmortal uses legitimate APIs and libraries for stealthy data gathering and ...
ReactOS, which many refer to as the "open source version of Windows" has reached its 30th birthday. Development on the free ...