Hackers are actively targeting macOS users with a newly identified infostealer dubbed “ClickLock Stealer,” leveraging paste-and-run social engineering techniques to bypass Apple’s native security protections without requiring exploits or elevated privileges. Despite macOS protections such as Gatekeeper, Transparency, Consent, and Control (TCC), System Integrity Protection (SIP), and mandatory code signing, threat actors are increasingly deploying […]

The post Hackers Use Paste-and-Run Commands to Deploy ClickLock Stealer Against Mac Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A sophisticated cyber espionage campaign targeting government and diplomatic organizations across Southeast Asia has used a Go-based remote access Trojan, dubbed GoSerpent, to collect sensitive documents for weeks before exfiltrating them via network shares. Researchers first identified the activity in February 2026, although evidence indicates the operation began in late 2025. The attackers deployed GoSerpent […]

The post GoSerpent Silently Steals Government Files for Weeks Before Sending Them to Hackers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Two alleged leading members of the Scattered Spider cybercrime collective have been sentenced to five years and six months in prison each for their involvement in the 2024 cyberattack on Transport for London (TfL). The National Crime Agency (NCA) described this case as the largest cybercrime prosecution in the UK. Thalha Jubair, 20, from East […]

The post Two Scattered Spider Hackers Jailed in UK’s Largest Cybercrime Prosecution appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A surge in ACR Stealer activity from late April through mid-June 2026, with operators combining ClickFix social engineering, WebDAV-hosted payloads, PowerShell obfuscation, and steganography to compromise enterprise users. The malware operations rely on ClickFix social-engineering lures to trick victims into pasting attacker-supplied commands into Windows Run dialogs or command prompts, ultimately stealing browser credentials, session […]

The post ACR Stealer Uses ClickFix, WebDAV, and Steganography to Steal Browser Credentials and Tokens appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.