Malicious tensorlake npm version 0.5.144 contained a Shai-Hulud worm that harvests credentials and can republish compromised ...

Hackers compromised 100+ websites with fake Cloudflare checks to spread LUNEXSTEALER, stealing data and enabling remote commands.

Over 100 hacked websites used fake Cloudflare checks to trick visitors into installing LunexStealer through ClickFix commands.

Earth Sirrush is hiding espionage malware inside PNG images and malicious Notepad++ plugins to compromise Ukrainian ...

Over 100 hacked Ukrainian websites used fake Cloudflare checks to install Lunex Stealer and steal browser passwords, tokens ...

Russia-aligned hacking group Earth Sirrush has used more than ten malware families in sustained spying campaigns against Ukrainian ...

ClickFix attacks now hide payloads using DNS TXT records and browser cache pre-fetching, making it tougher to spot early ...

A ClickFix campaign has been observed hiding a VBScript payload in the browser cache, disguised as an image, so the script was already on the device when the victim was tricked into running a command ...

Cybercriminals are using fake versions of ChatGPT to trick consumers into installing malware that can give attackers remote ...

Microsoft observed ClickFix attacks using browser cache smuggling to execute cached VBScript and launch a credential-targeting malware chain.

PM on a Friday. Across the office, laptops are shut, desks are cleared, and your internal IT team or daytime helpdesk logs ...

Russian group Star Blizzard expands phishing campaigns with the RedFlick technique, using scheduled tasks to deliver the ...