ClickFix Campaign Abuses Trusted Websites to Deploy Psychedelic Stealer
GitHub Actions re-enabled with Mini Shai-Hulud payload still active
New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining
Kothamine malware uses Tailscale’s tailcat to evade network detection
in the wild 11 min1
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
TWEAKOS Malware Turns Telegram Into a Stealer, C2 Platform and Stolen Account Marketplace
5 min
Attackers Are Turning Everyday Business Emails Into Malware Delivery Machines
in the wild 7 min
MacSync info-stealing malware hides malicious commands in an iCloud calendar
Macfinger ClickFix campaign, (Tue, Sep 22nd)
A Data-Driven Analysis of Infostealer Malware Victims
Emerging Ransomware Gang Uses Backup Destruction Threats to Pressure Victims
in the wild 2 min
17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360
in the wild 8 min
Fake Firefox Extension Hijacks Google Accounts Without Stealing Passwords First
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
13 sources 5 min
DarkMe RAT trades zero-days for plain phishing emails
The Domains Keep Disappearing, but the Malware Infrastructure Behind Them Never Moves
in the wild 11 min
ChatGPT Computer History Feature Creates New Attack Surface for macOS Infostealers
2 sources 4 min
Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR
Another worry for water systems: infostealer exposure
TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
Vidar Uses Custom Bytecode Interpreter and ARX Stream Ciphers for Per-Build String Obfuscation
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
New Remus Infostealer Steals OpenAI and Anthropic API Tokens, Passwords and Crypto Wallets
EtherHiding Malware Abuses Polygon Blockchain to Hide C2 and Steal Banking Credentials
