#malware


Custom ChatGPTs push ClickFix attacks to deploy RAT malware

Sep 30, 2026 // 00:16

Custom variants of OpenAI’s ChatGPT promoted in sponsored Google results are directing unsuspecting users to malicious sites that use ClickFix attacks to deliver malware. The […]

RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

Sep 28, 2026 // 20:40

RatHat’s operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced […]

Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware

Sep 25, 2026 // 17:47

Two actions-cool GitHub Actions have been disabled for a second time after the repositories became accessible last week, months after they were compromised during the […]

PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence

Sep 25, 2026 // 16:27

Cybersecurity researchers have flagged a new version of PamStealer that ensures that the main payload can only be recovered using a server-side decryption chain. The […]

MacSync malware uses public iCloud calendars to deliver new payloads

Sep 24, 2026 // 23:57

A new variant of the MacSync info-stealing malware targeting macOS systems now uses public iCloud calendar events to deliver fresh payloads. MacSync is a Swift-based […]

17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360

Sep 24, 2026 // 23:39

ClickFix has become the most common way attackers get into enterprise networks, and it does it without an exploit, an attachment, or a file on […]

New RemControl Android banking malware targets users in Europe and Canada

Sep 24, 2026 // 23:38

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application. Although the infrastructure has been […]

New Carbonato malware uses AI agents to hijack exposed Docker hosts

Sep 24, 2026 // 23:37

A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. The malware features […]

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

Sep 23, 2026 // 17:27

A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker’s server, Cisco […]

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

Sep 23, 2026 // 11:37

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, […]

Previous 1 2 3 4 … 40 Next