Cybercriminals are increasingly abusing trusted cloud platforms, and a new campaign demonstrates just how dangerous this … Google Cloud Phishing Attack Spreads Remcos RATRead more
credential theft
MuddyWater Hackers Launch Massive 12K-System Cyber Scan
A MuddyWater-style cyber campaign has been observed conducting large-scale reconnaissance across more than 12,000 internet-exposed systems … MuddyWater Hackers Launch Massive 12K-System Cyber ScanRead more
Synology SSL VPN Client Vulnerabilities Let Remote Attackers Access Sensitive Files
Two critical Synology SSL VPN Client vulnerabilities have been disclosed, raising serious concerns for organizations relying … Synology SSL VPN Client Vulnerabilities Let Remote Attackers Access Sensitive FilesRead more
W3LL Phishing Kit Takedown Disrupts Global MFA Bypass Attacks
The W3LL phishing kit takedown marks a significant victory in the global fight against cybercrime. In … W3LL Phishing Kit Takedown Disrupts Global MFA Bypass AttacksRead more
APT41 Hack Targets Cloud Servers to Steal Credentials
A sophisticated APT41 Winnti backdoor campaign targeting Linux cloud servers is redefining how cloud infrastructure is … APT41 Hack Targets Cloud Servers to Steal CredentialsRead more
Storm-1175 Exploits 0-Days to Deploy Medusa Ransomware in 24 Hours
Microsoft has warned of a fast-moving ransomware campaign driven by the threat group Storm-1175. The attackers … Storm-1175 Exploits 0-Days to Deploy Medusa Ransomware in 24 Hours Read more
36 Malicious npm Strapi Packages Used in Targeted Supply Chain Attack
A sophisticated software supply chain attack has been discovered targeting developers using Strapi. Attackers published 36 … 36 Malicious npm Strapi Packages Used in Targeted Supply Chain Attack Read more
Backdoored Telnyx Python SDK on PyPI Steals Credentials Across Platforms
A new software supply chain attack has targeted developers after threat actors compromised the Telnyx Python … Backdoored Telnyx Python SDK on PyPI Steals Credentials Across PlatformsRead more
Copyright-Themed Lures Deliver Multi-Stage PureLog Stealer
A new credential theft campaign is leveraging copyright violation lures to distribute PureLog Stealer, a multi-stage … Copyright-Themed Lures Deliver Multi-Stage PureLog StealerRead more
Perseus Android Malware: Full Device Takeover & Note Theft Explained
Mobile banking malware continues to evolve, but the Perseus Android malware represents a significant escalation in … Perseus Android Malware: Full Device Takeover & Note Theft ExplainedRead more