Android
Android Malware Exposes Its Own Operators While Hijacking Phones and Stealing Sensitive Data
An Android remote-access Trojan, YuanKong, whose weakly protected dropper reveals more than its hidden payload: it exposes the operator account identifiers embedded in each...
cyber security
New PEERSTITCH Malware Targets FortiGate Firewalls and Hides Inside System Memory
PEERSTITCH, a memory-resident ARM64 implant deployed against FortiGate firewalls during a prolonged intrusion into a telecommunications managed service provider.
The malware hijacks legitimate FortiOS...
cyber security
New ClickFix Attack Deploys Lorem Ipsum Malware Loader to Establish Remote Access
A ClickFix campaign uses the Lorem Ipsum Loader to install a Python-based tunneling implant, giving attackers a covert route into victims’ networks and potentially...
cyber security
Hackers Target PuTTY Users With SEO Poisoning and Ethereum-Powered Malware
A search for PuTTY can lead to more than a fake download. In a campaign reported on October 12, attackers used search-engine optimization (SEO)...
cyber security
New macOS Malware Uses Fake System Prompts to Steal Passwords and Deploy RAT
A newly marketed macOS malware-as-a-service platform, ICMacOS, is using fake Apple system dialogs to steal login passwords before deploying an information stealer that has...
cyber security
Fake Web3 Accelerator Offers Claude and Gemini Credits to Spread Malware
A sophisticated campaign in which threat actors posed as a Web3 venture-capital accelerator to target cryptocurrency start-ups, developers and founders with free Claude and...
cyber security
New macOS Malware Clones Chrome Profiles and Browses With Victims’ Live Logins
A newly reported macOS implant tracked as GhostProfile clones browser profiles and remotely operates concealed copies of Chrome or Firefox, allowing attackers to browse...
cyber security
Kimsuky Uses Fake Zoom Installers and Malicious LNK Files to Deploy Malware
North Korea-linked cyber espionage group Kimsuky has expanded its Operation GitPower campaign by using fake Zoom installers and malicious Windows shortcut files to target...