Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
in the wild 8 min
Cybercriminals Abandon Domains but Keep the Hosting Networks Behind Malware Campaigns
in the wild 6 min
WordPress Malware Uses Hidden Plugin and Blockchain C2 to Stay Undetected
ChainScript: the RAT that hides its command server inside a blockchain contract
New Remus Infostealer Steals OpenAI and Anthropic API Tokens, Passwords and Crypto Wallets
Hackers Hide Malware Servers on Blockchain to Steal Bank Logins and 2FA Codes
Hackers Deploy New SloppyRAT via ClickFix to Enable Ransomware Lateral Movement
in the wild 6 min1
Hackers Abuse Google CAPTCHA, WebDAV and BNB Smart Chain to Deploy Credential-Stealing Malware
in the wild 5 min
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
in the wild 15 min2
Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner
in the wild 6 min
Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks
in the wild 4 min1
ClickFix Campaign Compromises 31 Orgs, Abuses Polygon Blockchain
in the wild
WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
7 min
Fake Minecraft Sites Are Still Spreading WeedHack After C2 Takedown
4 min