#malware

Bing AI Recommends Fake OpenClaw Repo Hiding Info-Stealing Malware

Mar 6, 2026 // 01:52

Researchers have discovered that Microsoft Bing’s AI-powered search was recommending a malicious GitHub repository for OpenClaw, a popular open-source AI agent. This allowed threat actors to distribute info-stealing […]

Iran-Linked “Dust Specter” Group Targets Iraqi Officials with Novel Malware

Mar 5, 2026 // 15:35

In January 2026, a suspected Iran-nexus threat actor tracked as Dust Specter launched a targeted cyberespionage campaign against government officials in Iraq. The group impersonated Iraq’s Ministry of Foreign Affairs to […]

Microsoft Warns Governments of Malware Spread via OAuth Redirect Abuse

Mar 3, 2026 // 13:35

Microsoft has warned of phishing campaigns specifically targeting government and public-sector organizations by abusing OAuth redirection mechanisms to deliver malware. Key Details of the Campaign Mitigation and […]

SloppyLemming Group Deploys Dual Malware Chains Against South Asian Governments

Mar 3, 2026 // 12:16

The threat actor SloppyLemming (also known as Outrider Tiger or Fishing Elephant) has launched a sophisticated cyber-espionage campaign targeting government and critical infrastructure entities in Pakistan and Bangladesh. According to […]

Go Crypto Malware Steals Credentials and Installs Stealthy Backdoor

Feb 27, 2026 // 20:07

Researchers have identified a malicious Go module, github.com, designed to harvest passwords and deploy the Rekoobe backdoor. Disclosed on February 27, 2026, the module impersonates the legitimate golang.org/x/crypto library to […]

Ivanti Security Alert: CISA Warns of Undetected RESURGE Malware Infections

Feb 27, 2026 // 20:03

CISA has issued an updated malware analysis report warning that the RESURGE malware can remain dormant and undetected on Ivanti Connect Secure devices for extended periods. Key Warning Details Recommended […]

ScarCruft Targets Air-Gapped Networks via Zoho WorkDrive and USB Malware

Feb 27, 2026 // 16:55

ScarCruft (also known as APT37), a North Korean state-sponsored threat actor, has launched a sophisticated cyber espionage campaign named Ruby Jumper. Recently documented by Zscaler ThreatLabz, the campaign […]

New Aeternum Malware Uses Smart Contracts on Polygon to Resist Takedown Efforts

Feb 26, 2026 // 23:16

Cybersecurity researchers have identified a new botnet loader called Aeternum C2 that leverages the Polygon blockchain to store encrypted command-and-control (C2) instructions. This technique, documented by Qrator Labs and Outpost24’s KrakenLabs, makes […]

NuGet and npm Malicious Packages Steal ASP.NET Data and Drop Malware

Feb 25, 2026 // 17:36

Recent supply chain attacks on NuGet and npm have targeted developers by exfiltrating sensitive application data and deploying cross-platform malware. Malicious NuGet Packages: ASP.NET Data Theft Researchers at Socket identified four […]

European Bank Targeted by UAC-0050 via Spoofed Domain and RMS Malware

Feb 24, 2026 // 20:15

A Russia-aligned threat actor known as UAC-0050 (also called DaVinci Group or Mercenary Akula) has expanded its operations beyond Ukraine to target a European financial institution involved in regional reconstruction. Campaign Details […]

Previous 1 … 37 38 39 40 Next