A global cybercrime operation known as StopAndProtect has been identified, utilizing thousands of compromised WordPress websites to spread malware and steal sensitive data.
A campaign attributed to suspected Chinese spies has compromised email servers at several major universities in the US and Canada, exploiting vulnerabilities in Roundcube mail software to access sensitive data.
Recent findings reveal a set of malicious npm packages linked to North Korean threat actors, designed to steal sensitive developer information under the guise of legitimate tools.
A data-theft gang has escalated its tactics, now targeting businesses directly with USB drives after failed online attempts.
A newly identified threat group is using social engineering tactics and custom malware to compromise organizations via Microsoft Teams, according to Google's Threat Intelligence Group.
A new malware named Speagle has been identified, which hijacks the Cobra DocGuard software to extract sensitive data from infected systems.
A malicious npm package posing as an OpenClaw installer has been identified, capable of deploying a remote access trojan (RAT) and stealing sensitive data from macOS systems.
The Steaelite remote access trojan combines data theft and ransomware capabilities, streamlining double extortion attacks on Windows systems.
Recent findings reveal a series of malicious Chrome extensions that hijack affiliate links and steal ChatGPT authentication tokens, impacting users across various e-commerce platforms.
