#abuses


Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

Sep 26, 2026 // 21:27

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The […]

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

Sep 22, 2026 // 00:12

A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer […]

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Sep 18, 2026 // 11:11

Cybersecurity researchers have flagged a new Android malware called RatHat that’s assessed to be operated by China-based threat actors and features an artificial intelligence (AI)-powered […]

Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools

Aug 27, 2026 // 14:10

Individuals and organizations in Cambodia have emerged as the target of a new campaign that delivers an open-source remote access trojan (RAT) called Spark RAT. […]

CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification

Aug 20, 2026 // 14:49

Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP/3 traffic into HTTP/1.1 requests to the […]

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Aug 18, 2026 // 15:41

Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT. “TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its […]

TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments

Jul 27, 2026 // 13:24

Cybersecurity researchers have flagged fresh malicious cyber activity by a threat actor with ties to East Asia targeting government entities in the Middle East. The […]

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

Jul 7, 2026 // 18:21

A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June […]

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

Jul 2, 2026 // 16:06

The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that’s designed to gain surreptitious access to a victim’s email […]

AI-Generated Browser Ransomware Abuses Chrome File System Access API on Android

Jul 1, 2026 // 16:07

Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining “unrealistic browser-malware concepts with a real browser […]

1 2 Next