#uses


Threat actor uses Microsoft Teams to deploy new “Snow” malware

Apr 25, 2026 // 18:17

A threat group tracked as UNC6692 uses social engineering to deploy a new, custom malware suite named “Snow,” whichi includes a browser extension, a tunneler, […]

Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2

Apr 24, 2026 // 12:39

Chinese-speaking individuals are the target of a new campaign that uses a trojanized version of SumatraPDF reader to deploy the AdaptixC2 Beacon post-exploitation agent and […]

New GoGra malware for Linux uses Microsoft Graph API for comms

Apr 22, 2026 // 13:16

A Linux variant of the GoGra backdoor uses legitimate Microsoft infrastructure, relying on an Outlook inbox for stealthy payload delivery. The malware is developed by […]

NGate Android malware uses HandyPay NFC app to steal card data

Apr 21, 2026 // 12:16

A new variant of the NGate malware that steals NFC payment data is targeting Android users by hiding in a trojanized version of HandyPay, a […]

The Gentlemen ransomware now uses SystemBC for bot-powered attacks

Apr 21, 2026 // 00:16

A SystemBC proxy malware botnet of more than 1,570 hosts, believed to be corporate victims, has been discovered following an investigation into a Gentlemen ransomware attack […]

Payouts King ransomware uses QEMU VMs to bypass endpoint security

Apr 18, 2026 // 00:38

The Payouts King ransomware is using the QEMU emulator as a reverse SSH backdoor to run hidden virtual machines on compromised systems and bypass endpoint […]

New ATHR vishing platform uses AI voice agents for automated attacks

Apr 16, 2026 // 17:17

A new cybercrime platform called ATHR can harvest credentials via fully automated voice phishing attacks that use both human operators and AI agents for the […]

APT28 uses PRISMEX malware in attacks against Ukraine & NATO.

Apr 8, 2026 // 16:59

A Russian cyber espionage group, APT28 (also Forest Blizzard and Pawn Storm), is reportedly conducting spear-phishing attacks against Ukraine and its allies, using a newly […]

Chinese group Storm-1175 swiftly uses unknown flaws to spread Medusa ransomware.

Apr 7, 2026 // 09:39

A Chinese cyber threat group known for using Medusa ransomware has been found to be exploiting both new and recently patched vulnerabilities in order to […]

TeamPCP uses Kubernetes attacks to deploy a wiper malware targeting Iranian systems.

Mar 24, 2026 // 10:57

The TeamPCP hacking group is attacking Kubernetes setups using a damaging script. When the tool detects systems set up for Iran, it erases all the […]

Previous 1 … 10 11 12 13 Next