News

Malware targets Mac users with fake CAPTCHA and AMOS Stealer
A new ClickFix campaign targets macOS users with fake Spectrum support sites, tricking victims with CAPTCHA failures to paste ...
New FileFix attack weaponizes Windows File Explorer for stealthy commands
A cybersecurity researcher has developed FileFix, a variant of the ClickFix social engineering attack that tricks users into ...
New FileFix attack brings ClickFix social engineering to Windows File Explorer — how to stay safe
As reported by BleepingComputer, this new FileFix method uses the Windows File Explorer address bar instead. Mr.d0x not only ...
Windows users warned of major security issue - here's why FileFix attack could be a big concern
A cybersecurity researcher who goes by the name mr. dox has developed a new version of ClickFix, a browser-based attack often ...
The Hacker News17h
North Korea-linked Supply Chain Attack Targets Developers with 35 Malicious npm Packages
Contagious Interview, first publicly documented by Palo Alto Networks Unit 42 in late 2023, is an ongoing campaign undertaken ...
The Hacker News6d
New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains
Malware campaign abuses Cloudflare Tunnel and phishing lures to deliver in-memory RATs across multiple regions.
ITC.ua5d
North Korean hackers send virus through vacancies in the crypto sphere
In May, a Python-based remote access trojan (RAT) called PylangGhost was discovered. The malware is distributed by DPRK ...
Cryptopolitan on MSN5d
North Korean hackers target crypto job seekers with malware
North Korean hackers lured crypto professionals with fake job interviews to deploy new Python-based malware, PylangGhost.
Cyber Security Intelligence2d
Pakistan’s Cyber Offensive: APT36 Targets Indian Defence
A social engineering campaign exploiting ID credentials to deliver malicious payloads, infiltrate systems & gather intelligence.
Cybercriminals are targeting gamers with expired Discord invite links which redirect to malware servers - here's how to stay safe
Cybercriminals are recycling expired Discord links to launch silent, devastating multi-stage malware attacks A fake Discord bot tricks users into running PowerShell commands disguised as CAPTCHA fixes ...
Kali Linux gets a major upgrade with more than 10 new hacking tools, plus VPN IP extension, great for ethical hackers and pentest pros
Among the most visible quality-of-life improvements is the integration of the new GNOME VPN IP extension, which allows direct ...
SecurityWeek5d
Cloudflare Tunnels Abused in New Malware Campaign
A threat actor is abusing Cloudflare Tunnels for the delivery of a Python loader as part of a complex infection chain.