#abuse


Hackers abuse Notepad++ plugins to stealthily install malware

Jul 23, 2026 // 19:36

Ukraine’s CERT has uncovered attacks distributing an archive containing the legitimate Notepad++ application and a malicious utility called LunchPoke disguised as a plugin to establish […]

Hackers abuse ViPNet software to target Russian govt agencies

Jul 20, 2026 // 00:36

An advanced threat actor is abusing the update mechanism for the ViPNet private networking product suite to target Russian organizations, including government agencies. Dubbed HelloNet, […]

SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT

Jul 2, 2026 // 02:16

Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and execute AsyncRAT. Kaspersky said the activity is part of […]

SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT

Jul 1, 2026 // 23:04

Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and execute AsyncRAT. Kaspersky said the activity is part of […]

Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse

Jun 29, 2026 // 14:45

A Russian advanced persistent threat (APT) group has continued to evolve and expand its malware arsenal as part of its ongoing cyber onslaught against Ukraine […]

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data

Jun 19, 2026 // 12:11

Salesforce has revealed that it disabled the Klue Battlecards app integration within its platform in response to a security incident impacting the competitive intelligence company […]

DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic

Jun 18, 2026 // 19:18

Threat actors associated with the DragonForce ransomware have been observed using a custom Go-based remote access trojan (RAT) called Backdoor.Turn to conceal command-and-control (C2) traffic […]

ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories

Jun 18, 2026 // 19:17

The internet did not break this week. It got used exactly as designed, which is worse. Searches were siphoned through shady browser add-ons. AI chat […]

Hackers abuse Google ads, Claude.ai chats to push Mac malware

May 10, 2026 // 20:56

Attackers are abusing Google Ads and legitimate Claude.ai shared chats in an active malvertising campaign. Users searching for “Claude mac download” may come across sponsored search […]

Hackers abuse Google ads for GoDaddy ManageWP login phishing

May 7, 2026 // 00:37

A phishing campaign delivered through Google sponsored search results is targeting credentials for ManageWP, GoDaddy’s platform for managing fleets of WordPress websites. The threat actor […]