North Korean threat actors are leveraging fake Microsoft security alerts to distribute NarwhalRAT, a sophisticated remote access trojan. The campaign uses convincing Windows security warnings to trick users into downloading malicious payloads, granting attackers full system access. Organizations mus
A sophisticated supply chain attack compromised the OptinMonster WordPress plugin, affecting approximately 1.2 million active installations. Attackers gained unauthorized access to the plugin’s distribution infrastructure, injecting malicious code that created backdoor administrator accounts on affe
Threat actors are leveraging weaponized Virtual Hard Disk (VHDX) files to deploy Remcos RAT, a powerful remote access trojan. This attack vector bypasses traditional security measures by exploiting Windows’ native ability to mount virtual disk images, delivering the malware payload through multiple
Security researchers have uncovered a sophisticated criminal operation behind EtherRAT malware, revealing an extensive infrastructure spanning multiple domains, phishing pages, and distribution channels. The network facilitated credential theft, financial fraud, and unauthorized system access across
North Korean state-sponsored threat actors are exploiting the trust developers place in their development tools by weaponizing legitimate software packages and IDE extensions. These campaigns transform everyday coding utilities into malware delivery mechanisms, targeting software developers globally
Arch Linux has temporarily suspended new account registrations for its Arch User Repository (AUR) following a coordinated attack involving malicious package uploads. The incident forced administrators to lock down the community-driven repository after detecting numerous suspicious commits designed t
Cybercriminals are leveraging weaponized LNK files and PowerShell scripts to deliver NarwhalRAT, a remote access trojan capable of extensive system compromise. The attack chain begins with malicious shortcut files that trigger PowerShell commands, ultimately deploying a Python-based loader to establ
Security researchers have uncovered a sophisticated adware network comprising 152 malicious Chrome extensions disguised as wallpaper customization tools. With over 105,000 combined installations, these extensions injected unwanted advertisements, generated fake traffic, and potentially harvested use
Security researchers have discovered more than 50 malicious Android applications distributing the MagicAd trojan through official app stores, including Google Play. These seemingly legitimate apps—ranging from utilities to productivity tools—have collectively amassed millions of downloads. MagicAd o
Cybercriminals have developed a sophisticated malware distribution campaign embedding the newly discovered Argamal malware within fully functional adult-themed video games. Unlike typical trojanized software that fails to deliver promised functionality, these games work as advertised while silently