Search: “mshta”

74 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 36 Threat actor 12 Ransomware 12 Vulnerability 9 Exploit / PoC 5 Phishing & fraud 3 Data breach 1

SeverityAll critical 10 high 45 medium 23 low 0 info 0

New FileFix Variant Delivers StealC Malware Through Multilingual Phishing Site

The Hacker NewsSep 17, 04:13 UTC · Sep 17, 2025Malware

30

Russia-Aligned TAG-110 Targets Asia and Europe with HATVIBE and CHERRYSPY

Recorded FutureAug 22, 00:00 UTC · Aug 22, 2025Vulnerability CVE-2024-23692

60

SOC files: an APT41 attack on government IT services in Africa

Kaspersky SecurelistJul 21, 08:00 UTC · Jul 21, 2025Threat actor

60

PowerShell-Based Loader Deploys Remcos RAT in New Fileless Attack

Infosecurity MagazineMay 15, 16:00 UTC · May 15, 2025Malware

42

⚡ Weekly Recap: Critical SAP Exploit, AI-Powered Phishing, Major Breaches, New CVEs & More

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Phishing & fraud CVE-2025-31324 CVE-2024-58136 CVE-2025-32432+16 CVEs

60

MintsLoader Drops GhostWeaver via Phishing, ClickFix — Uses DGA, TLS for Stealth Attacks

The Hacker NewsMay 2, 08:57 UTC · May 2, 2025Malware

30

Kimsuky APT exploited BlueKeep RDP flaw in attacks against South Korea and Japan

Security AffairsApr 21, 18:25 UTC · Apr 21, 2025Threat actor CVE-2019-0708 CVE-2017-11882

60

How Lumma Stealer sneaks into organizations

Kaspersky SecurelistApr 21, 12:00 UTC · Apr 21, 2025Malware

30

Fake CAPTCHA PDFs Spread Lumma Stealer via Webflow, GoDaddy, and Other Domains

The Hacker NewsMar 1, 07:55 UTC · Mar 1, 2025Malware

30

North Korea-linked APt Emerald Sleet is using a new tactic

Security AffairsFeb 12, 11:55 UTC · Feb 12, 2025Malware

42

Kimsuky Group used custom RDP Wrapper version

Security AffairsFeb 8, 18:15 UTC · Feb 8, 2025Threat actor

57

Malware peddlers experimenting with BPL sideloading and masking malicious payloads as PGP keys

Help Net SecurityAug 23, 08:23 UTC · Aug 23, 2024Malware

30

APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt Strike

Cisco TalosAug 1, 12:00 UTC · Aug 1, 2024Threat actor CVE-2018-08241

60

Weaponization of Excel Add-Ins Part 2: Dridex Infection Chain Case Studies

Palo Alto Unit 42Jun 5, 20:44 UTC · Jun 5, 2024Vulnerability

30

Post-Macro World Sees Rise in Microsoft OneNote Documents Delivering Malware

The Hacker NewsFeb 4, 04:21 UTC · Feb 4, 2023Malware

42

All You Need to Know About Emotet in 2022

The Hacker NewsNov 26, 11:49 UTC · Nov 26, 2022Ransomware

57

Experts analyzed the evolution of the Emotet supply chain

Security AffairsOct 11, 10:40 UTC · Oct 11, 2022Ransomware

57

New Report Uncovers Emotet's Delivery and Evasion Techniques Used in Recent Attacks

The Hacker NewsOct 11, 06:25 UTC · Oct 11, 2022Ransomware

57

Cyber Criminals Using Quantum Builder Sold on Dark Web to Deliver Agent Tesla Malware

The Hacker NewsSep 29, 07:13 UTC · Sep 29, 2022Malware

30

Threat actors use Quantum Builder to deliver Agent Tesla malware

Security AffairsSep 28, 15:43 UTC · Sep 28, 2022Malware

42

Researchers Detail OriginLogger RAT — Successor to Agent Tesla Malware

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2022Malware

30

New 'Quantum' Builder Lets Attackers Easily Create Malicious Windows Shortcuts

The Hacker NewsJun 25, 04:05 UTC · Jun 25, 2022Ransomware

57

Researchers Warn of Spam Campaign Targeting Victims with SVCReady Malware

The Hacker NewsJun 7, 12:26 UTC · Jun 7, 2022Malware

30

Xbash Combines Botnet, Ransomware, Coinmining in Worm that Targets Linux and Windows

Palo Alto Unit 42Mar 24, 08:51 UTC · Mar 24, 2022Ransomware

57

ScarCruft surveilling North Korean defectors and human rights activists

Kaspersky SecurelistNov 29, 10:00 UTC · Nov 29, 2021Data breach

57

Lemon Duck brings cryptocurrency miners back into the spotlight

Cisco TalosOct 13, 14:59 UTC · Oct 13, 2020Ransomware

57

Authors of Purple Fox EK adds 2 Microsoft exploits

Security AffairsJul 7, 14:00 UTC · Jul 7, 2020Exploit / PoC in the wildCVE-2020-0674 CVE-2019-1458 CVE-2018-8120+1 CVEs

60

APT or not APT? What’s Behind the Aggah Campaign

Security AffairsSep 24, 14:26 UTC · Sep 24, 2019Threat actor

57

Sofacy Group’s Parallel Attacks

Palo Alto Unit 42Nov 1, 11:08 UTC · Nov 1, 2018Malware

42

Threat Roundup for September 14 to September 21

Cisco TalosSep 22, 14:23 UTC · Sep 22, 2018Vulnerability

30

A new multi-stage attack deploys a password stealer without using macros

Security AffairsFeb 20, 09:05 UTC · Feb 20, 2018Malware CVE-2017-11882

35

The Cobalt group is exploiting the CVE-2017-11882 Microsoft Office flaw in targeted attacks

Security AffairsNov 26, 14:06 UTC · Nov 26, 2017Vulnerability CVE-2017-11882 CVE-2017-8759

47

Go to HELL, PowersHELL : Powerdown the PowerShell Attacks

Security AffairsNov 15, 07:20 UTC · Nov 15, 2017Malware in the wild1

57

Threat Round-up for Mar 24

Cisco TalosMar 31, 21:18 UTC · Mar 31, 2017Ransomware

57