Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content
Operation Conflict Compass Deploys VelvetCake PowerShell Malware Through Malicious LNK Files
New Exvicy ClickFix Framework Built on Rival ErrTraffic's Code
Cybercriminals Abandon Domains but Keep the Hosting Networks Behind Malware Campaigns
in the wild 6 min
[0day-rubbish] Devolutions Server (DVLS) 2026.2.14.0 PAM entitlement-gate bypass to SYSTEM PowerShell via the test-script endpoint (9.1)
TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data
EtherHiding Malware Abuses Polygon Blockchain to Hide C2 and Steal Banking Credentials
Hackers Hide XMRig Miner in Windows Registry, PNG and WAV Files to Evade Detection
in the wild 5 min
PowerShell Malware Abuses Registry and DNS TXT Records to Deploy XMRig Crypto Miner
in the wild 4 min
LausivLoader analysis, or how to pass data between malware stages, (Thu, Sep 17th)
in the wild 12 min
Hackers Abuse AutoIt to Inject AsyncRAT Into Microsoft-Signed Windows Process
in the wild 5 min1
AsyncRAT Malware Abuses AutoIt and PowerShell to Hide Inside Legitimate Windows Process
5 min3
Daisy-Chaining Trust: Investigating Faronics Deploy Abuse
in the wild
'TerminalFix' Campaign Weaponizes PowerShell for Enterprise Attacks
in the wild
TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse
in the wild 3 min1
Thousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtect
in the wild
xHunt Campaign: New PowerShell Backdoor Blocked Through DNS Tunnel Detection
15 min
Cortex XDR™ Detects New Phishing Campaign Installing NetSupport Manager RAT
in the wild 14 min1
"Blank Slate" Campaign Takes Advantage of Hosting Providers to Spread Ransomware
in the wild 6 min1