Search: “Notion”

90 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 90 Policy & legal 89 Vulnerability 80 Ransomware 67 Exploit / PoC 55 Industry 48 Data breach 45 Threat actor 39 Phishing & fraud 34 Research 15 AI tools & infra 11 AI safety & security 10 Advisory 5 AI industry 4

SeverityAll critical 231 high 126 medium 78 low 140 info 23

Doubloon Dredger Abuses Notion to Harvest Authentication Tokens

Doubloon Dredger malware abuses Notion and malicious PDFs to steal Microsoft authentication tokens from victims.

Doubloon Dredger is a malware campaign that abuses Notion and malicious PDF files to harvest Microsoft authentication tokens. Using a legitimate collaboration service likely helps the operation blend into trusted SaaS traffic and evade detection. Stolen Microsoft authentication tokens can enable account access without knowing user passwords.

Infosecurity MagazineAug 24, 13:00 UTC · 22d agoMalware in the wild1

BlueBravo Uses Ambassador Lure to Deploy GraphicalNeutrino Malware

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Malware

Friday Squid Blogging: Squid-Inspired Fluid Pump

Schneier on SecurityJun 12, 21:05 UTC · Jun 12, 2026Malware

Fake Gaming and AI Firms Push Malware on Cryptocurrency Users via Telegram and Discord

The Hacker NewsJul 10, 14:41 UTC · Jul 10, 2025Malware

Florida Backdoor Bill Fails

Schneier on SecurityMay 12, 11:01 UTC · May 12, 2025Malware

Cybercriminals Exploit Popular Software Searches to Spread FakeBat Malware

The Hacker NewsAug 20, 03:55 UTC · Aug 20, 2024Malware

Friday Squid Blogging: Operation Squid

Schneier on SecurityMar 15, 00:00 UTC · Mar 15, 2024Malware

Hackers are increasingly hiding within services such as Slack and Trello to deploy malware

CyberScoopAug 16, 13:00 UTC · Aug 16, 2023Malware in the wild

BlueBravo Deploys GraphicalProton Backdoor Against European Diplomatic Entities

The Hacker NewsJul 29, 04:06 UTC · Jul 29, 2023Malware

Russian APT BlueBravo targets diplomatic entities with GraphicalProton backdoor

Security AffairsJul 28, 22:15 UTC · Jul 28, 2023Malware

Tracing cryptocurrency: Q&A with the PhD candidate and her adviser who proved it wasn't anonymous

The RecordApr 11, 12:29 UTC · Apr 11, 2023Malware

New Report Reveals NikoWiper Malware That Targeted Ukraine Energy Sector

The Hacker NewsFeb 1, 13:35 UTC · Feb 1, 2023Malware

Download Guide — Advanced Threat Protection Beyond the AV

The Hacker NewsMar 3, 12:50 UTC · Mar 3, 2020Malware

Supply Chain Security 101: An Expert’s View

Krebs on SecurityOct 22, 14:20 UTC · Oct 22, 2018Malware

Cyber threat analysis in complex adaptive systems

Help Net SecuritySep 25, 00:00 UTC · Sep 25, 2017Malware

Hackers Use ClickFix Lures to Deploy MacSync Stealer and Bypass macOS Security.

ClickFix malvertising campaigns deliver MacSync, a macOS infostealer sold as MaaS that bypasses Gatekeeper via Terminal commands and steals credentials.

Threat actors use ClickFix social-engineering lures, SEO poisoning, and malvertising impersonating brands like Claude, ChatGPT, Zoom, and Docker to trick users into pasting curl-to-zsh commands into Terminal, evading Gatekeeper and notarization checks. The MacSync Stealer (formerly Mac.c, emerged April 2025, linked to developer 'Mentalpositive') is a 64-bit Mach-O stager with single-byte XOR string obfuscation that daemonizes, polls C2 with custom API-key headers, streams AppleScript payloads into osascript, and persists via fake LaunchAgents. It steals browser credentials, Keychain data, SSH keys, session tokens, and crypto wallets, exfiltrating archives in 10MB HTTP PUT chunks. Microsoft documented more than 30 related MacSync domains.