WIRTE expands AshTag espionage operations, using phishing & DLL sideloading to target Middle East govts with persistent ...
Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing ...
Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.
A RunDLL error occurs when a DLL file that is needed to start with a program, run at startup, or set up as a scheduled task fails to start. Windows tries to load this ...
Two malicious Visual Studio Code extensions, Bitcoin Black and Codo AI, have been observed harvesting sensitive user data ...
An initial access broker tracked as Storm-0249 is abusing endpoint detection and response solutions and trusted Microsoft ...
The flaw, tracked as CVE-2025-9491, allowed cybercriminals to hide malicious commands from users inspecting files through ...
The initial access broker has been weaponizing endpoint detection and response (EDR) platforms and Windows utilities in ...
Hamas's best hackers have been maturing, building better malware, and spreading their attacks more widely across the region.
A phishing campaign impersonating Booking.com is attempting to trick property partners into running malware on their ...
MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predictable playbook.
A new malware campaign has been identified using a Python-based delivery system to deploy CastleLoader malware ...