
Sirius backdoor variant delivered by Korean FedEx-themed PDF emails
Trellix says a weaponized PDF launches fileless loaders that inject Sirius into suspended Windows processes after the victim approves a prompt.
3 stories, newest first · one card per story

Trellix says a weaponized PDF launches fileless loaders that inject Sirius into suspended Windows processes after the victim approves a prompt.

Fake AI crypto trading agent sites deliver Needle Stealer, which replaces browser wallet extensions to steal wallet passwords, HP reports.
Unit 42 details KRBanker banking trojan targeting South Korean bank users via KaiXin exploit kit and NEWSPOT adware, using pharming and process hollowing.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views