-
Threat actors behind the OpenSUpdater malware family are concealing a reflective loader inside recompiled 7-Zip self-extracting archive components, allowing malicious code to blend into otherwise legitimate-looking installers and evade conventional tri…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
DPRK-linked operators behind the Cross-Chain TxDataHiding (XCTDH) campaign have expanded their blockchain-backed command-and-control infrastructure with a new Ethereum-based recovery channel dubbed HashHiding. The technique stores an active C2 IP addre…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Keio Corporation has confirmed that a ransomware attack has caused a system failure within parts of its group infrastructure, disrupting certain business systems at its affiliated companies. The Japanese railway operator stated that train services cont…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google Ads deliver a tech support scam kit that shows fake security alerts, makes browsers appear locked and…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Infostealer malware is increasingly becoming the bridge between a compromised developer workstation and an enterprise cloud environment, with Lumma, RedLine, and Vidar emerging as major threats to credentials, API keys, and active browser sessions. Ide…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
FortiGuard found SectopRAT hidden in modified audio software files, using staged loading to steal browser data and remotely control infected Windows PCs.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Varonis Threat Labs discovered AvisLoader, a Windows malware loader that uses the Tox peer-to-peer network for C2 and arrives through a malicious ClickFix lure.
·
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
North Korea-linked threat actor Konni has launched a targeted cyberespionage operation against Ukraine-focused entities using malicious Windows shortcut files disguised as PDF documents. The campaign, tracked by SOCRadar Threat Research Unit as Operati…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
AvisLoader, a newly observed Windows malware loader designed to maintain operator access even when conventional command-and-control infrastructure is disrupted. Instead of relying on a fixed domain, IP address, or centralized server, the malware uses t…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly uncovered Android banking trojan dubbed RemControl is targeting customers of more than 30 financial institutions across Europe, the Middle East, and Canada. The malware combines fake Google Play pages, Android Accessibility Service abuse, crede…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
