Latest IntelligenceMalwarePage 3
Search by keyword →
Is Online Privacy Possible? How Digital Identities Can Help
Using the same email, phone number, payment method, and other identifiers makes it easier for data brokers and attackers to profile your activity. Anonyome Labs...
Hackers abuse FTP server banners to deliver new Windows malware
Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE. [...]...
BadBox-linked Android malware has now infected car head units
Android malware is spreading through the built-in firmware update mechanism of automotive head units, turning the devices into nodes for ad fraud and a resident...
New SynkLoader malware uses fake Windows lock screen to steal passwords
A new malware family dubbed SynkLoader uses a fake Windows lock screen to steal users’ login passwords before giving attackers remote access to corporate networ...
Hackers poison arrayref Rust crate to push infostealer malware
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers' systems during compilati...
Chinese hackers use AI to automate attacks on 170,000 servers
A Chinese-speaking cybercrime group is using AI-assisted tooling to automate attacks against vulnerable Windows and Linux web servers worldwide. Tracked as UAT-...
40 malicious Firefox extensions caught stealing crypto wallet data
Socket researchers have uncovered a network of 77 Firefox extensions tied to cryptocurrency wallet theft, credential harvesting, and deceptive software distribu...
New Manic Android malware can exfiltrate data through nearby devices
A new Android malware named Manic targeting users in multiple European countries has a fallback data exfiltration mechanism that uses nearby infected devices. [...
Rogue ransomware affiliate poses as recovery firm to steal payments
A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before the attacks become public and...
Rogue ransomware affiliate poses as data recovery firm to steal payments
A suspected ransomware affiliate is posing as a ransomware recovery service called "Ransom Busters," contacting the victims before the attacks become public and...
2,000 WordPress sites hijacked by StopAndProtect malware operation
A large-scale malware operation dubbed StopAndProtect uses thousands of compromised WordPress websites to distribute malware, issue commands, and store data sto...
US charges Iranian hackers over $3.4 billion intellectual property theft
The U.S. has charged 17 Iranians, alleged members of a hacking-for-hire company called Mabna Institute, involved in years-long operations that stole data from A...
Bad Microsoft Defender update causes Windows crashes on scans
Microsoft Defender users are reporting widespread scan failures after a recent security intelligence update, with Quick and Full scans crashing the antivirus en...
CISA: Medusa ransomware hit over 500 critical infrastructure orgs
The FBI said Tuesday that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the United States since June 2021. [......
OpenAI slows model development over concerns about cyber capabilities
OpenAI has temporarily slowed the development and scaling of its frontier AI models after determining that its existing monitoring, alignment, and security meas...
Clop created custom web shell for Windchill data theft attacks
A custom Java web shell likely linked to the Clop ransomware gang was designed specifically for PTC Windchill and FlexPLM servers, with built-in features to dec...
Your Controls Block Known Attacks. What About the Behavior?
Security controls can block a familiar attack method while missing quieter ways to achieve the same objective. Picus Security's Blue Report 2026 shows how preve...
GitHub suffers eight-hour outage affecting Actions, APIs, and Copilot
GitHub suffered a widespread outage on August 17 that disrupted core services including its API, Actions, Pull Requests, Issues, Pages, Webhooks, and Copilot, w...
Windows Server 2022 reaches end of mainstream support in 60 days
Microsoft has reminded IT administrators that Windows Server 2022 is rapidly approaching its mainstream end date of October 2026, when it will switch to extende...
Proton’s AI Paper Trail reveals how much ChatGPT and Claude know about users
Proton has launched a free tool that shows users how much personal information ChatGPT and Claude may reveal through their conversation histories, highlighting ...