A sophisticated BdThemes supply chain attack has compromised several popular WordPress plugins, exposing website administrators to … BdThemes Supply Chain Attack Uses Trusted Plugins to Hijack WordPress SitesRead more
malware
SilverFox Uses DLL Sideloading to Deploy ValleyRAT
The SilverFox threat group has expanded its malware toolkit in a campaign targeting a Japanese industrial … SilverFox Uses DLL Sideloading to Deploy ValleyRATRead more
Dropping Elephant Resurfaces With Advanced In-Memory RAT Campaign
The threat actor known as Dropping Elephant has re-emerged with a significantly upgraded malware operation, leveraging a China-themed … Dropping Elephant Resurfaces With Advanced In-Memory RAT CampaignRead more
Massive npm Supply Chain Attack Targets Red Hat Packages
A large-scale npm supply chain attack has compromised dozens of official packages under the @redhat-cloud-services scope, … Massive npm Supply Chain Attack Targets Red Hat PackagesRead more
North Korean Hackers Exploit Packagist to Target PHP Developers
A sophisticated software supply chain attack linked to the Famous Chollima Packagist attack has exposed a … North Korean Hackers Exploit Packagist to Target PHP DevelopersRead more
Grandoreiro Malware Resurfaces, Targeting Banks and Businesses
The Grandoreiro malware—a long-standing banking trojan active since 2016—has returned with new campaigns targeting financial institutions … Grandoreiro Malware Resurfaces, Targeting Banks and BusinessesRead more
InvisibleFerret Malware Now Ships as Compiled .pyd and .so Files to Evade Script Detection
The North Korea-linked threat actor known as Void Dokkaebi (also tracked as Famous Chollima) has quietly … InvisibleFerret Malware Now Ships as Compiled .pyd and .so Files to Evade Script DetectionRead more
How 1,350+ Cybercrime Servers Hid in Middle East Networks
The telecommunications and hosting infrastructure of the Middle East has evolved into a primary backbone for … How 1,350+ Cybercrime Servers Hid in Middle East NetworksRead more
Signed Lenovo Driver Abuse Lets Attackers Kill EDR Defenses
A newly uncovered vulnerability in a legitimate Lenovo driver is raising serious concerns across the cybersecurity … Signed Lenovo Driver Abuse Lets Attackers Kill EDR DefensesRead more
China-Linked Cyber Espionage Exploits Global Telecoms via New ‘Showboat’ Malware
A sophisticated, state-sponsored cyber espionage campaign is quietly compromising international telecommunications infrastructure. Security researchers have unveiled … China-Linked Cyber Espionage Exploits Global Telecoms via New ‘Showboat’ MalwareRead more