A search for PuTTY can lead to more than a fake download. In a campaign reported on October 12, attackers…
A newly marketed macOS malware-as-a-service platform, ICMacOS, is using fake Apple system dialogs to steal login passwords before deploying an…
A sophisticated campaign in which threat actors posed as a Web3 venture-capital accelerator to target cryptocurrency start-ups, developers and founders…
A newly reported macOS implant tracked as GhostProfile clones browser profiles and remotely operates concealed copies of Chrome or Firefox,…
North Korea-linked cyber espionage group Kimsuky has expanded its Operation GitPower campaign by using fake Zoom installers and malicious Windows…
Japanese karaoke operator Daiichi Kosho has issued a warning about a malware infection at its outsourcing partner, Nippon Columbia Group…
A WhatsApp-delivered financial-document lure is being used to deploy a sophisticated Windows malware chain that injects code into the Task…
Midnight Mimosa, an Android malware campaign embedded in firmware that monetizes compromised smartphones through advertising fraud and residential proxy services.…
CastleStealer, a C# information stealer first publicly identified in April 2026, has expanded its capabilities beyond credential theft. New samples…
A campaign in July 2026 using a trojanized Terraform provider to deploy cross-platform malware against developer environments. The operation delivers…