International law enforcement agencies have successfully disrupted the SocGholish malware distribution network as part of Operation Endgame. This takedown represents a significant blow to one of the most prolific malware delivery platforms responsible for deploying ransomware and information stealer
A sophisticated botnet dubbed “Popa” has been traced back to Paragon Solutions, a publicly-traded Israeli surveillance technology firm. The botnet infected thousands of devices across multiple countries, deploying commercial spyware under the guise of legitimate operations. This revelation exposes t
Microsoft has unveiled a sophisticated malware campaign distributing “Clipper” malware through USB-based LNK file worms that communicate with command-and-control servers over the Tor network. The malware intercepts cryptocurrency transactions by replacing wallet addresses in the clipboard, redirecti
The notorious hacktivist group TeamPCP exploited the “move fast and break things” mentality pervading open-source development to orchestrate a sophisticated supply chain attack. By targeting understaffed maintainers and leveraging rushed merge practices, the group injected malicious code into popula
The DragonForce threat group has developed a sophisticated technique to abuse Microsoft Teams relay infrastructure as a covert communication channel for their backdoor operations. By tunneling command and control (C2) traffic through legitimate Teams relay servers, attackers effectively hide malicio
North Korean threat actors are leveraging fake Microsoft security alerts to distribute NarwhalRAT, a sophisticated remote access trojan. The campaign uses convincing Windows security warnings to trick users into downloading malicious payloads, granting attackers full system access. Organizations mus
A sophisticated supply chain attack compromised the OptinMonster WordPress plugin, affecting approximately 1.2 million active installations. Attackers gained unauthorized access to the plugin’s distribution infrastructure, injecting malicious code that created backdoor administrator accounts on affe
Threat actors are leveraging weaponized Virtual Hard Disk (VHDX) files to deploy Remcos RAT, a powerful remote access trojan. This attack vector bypasses traditional security measures by exploiting Windows’ native ability to mount virtual disk images, delivering the malware payload through multiple
Security researchers have uncovered a sophisticated criminal operation behind EtherRAT malware, revealing an extensive infrastructure spanning multiple domains, phishing pages, and distribution channels. The network facilitated credential theft, financial fraud, and unauthorized system access across
North Korean state-sponsored threat actors are exploiting the trust developers place in their development tools by weaponizing legitimate software packages and IDE extensions. These campaigns transform everyday coding utilities into malware delivery mechanisms, targeting software developers globally