A threat group tracked as UNC6692 uses social engineering to deploy a new, custom malware suite named “Snow,” whichi includes a browser extension, a tunneler, […]
Chinese-speaking individuals are the target of a new campaign that uses a trojanized version of SumatraPDF reader to deploy the AdaptixC2 Beacon post-exploitation agent and […]
A previously undocumented threat activity cluster known as UNC6692 has been observed leveraging social engineering tactics via Microsoft Teams to deploy a custom malware suite […]
Hackers are exploiting a critical vulnerability in Marimo reactive Python notebook to deploy a new variant of NKAbuse malware hosted on Hugging Face Spaces. Attacks leveraging […]
A digitally signed adware tool has deployed payloads running with SYSTEM privileges that disabled antivirus protections on thousands of endpoints, some in the educational, utilities, […]
A current phishing scheme is targeting French-speaking businesses using deceptive job applications that install cryptocurrency miners and steal information. “The campaign uses heavily disguised VBScript […]
The TeamPCP hacking group is attacking Kubernetes setups using a damaging script. When the tool detects systems set up for Iran, it erases all the […]
A malicious package named openclaw-installer was recently discovered on the npm registry targeting developers by mimicking a legitimate installer for the OpenClaw game engine. Attack Details The package was […]
Security researchers have linked recent Termite ransomware breaches to an attack chain involving ClickFix social engineering and the CastleRAT backdoor. The activity is attributed to Velvet Tempest (also known as DEV-0504), a notorious […]
A recently identified campaign uses fake IT support to deliver a customized Havoc command-and-control (C2) framework across multiple organizations. This sophisticated attack, discovered by Huntress, often serves as […]
© Bulletproof Servers. All rights reserved.