#uses


TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor

Aug 30, 2026 // 13:01

Microsoft has disclosed details of a new ClickFix variant, dubbed TerminalFix, that aims to trick users into running a malicious command in Windows Terminal or […]

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address

Aug 27, 2026 // 12:40

Threat actors linked by Arctic Wolf to Dark Caracal with medium confidence deployed a previously undocumented Go-based malware framework, GoCaracal, during a June 2026 intrusion […]

AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes

Aug 26, 2026 // 00:37

A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock feature. […]

ToxicPanda Android malware uses VPN permissions to block Google Play

Aug 23, 2026 // 19:37

The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and adding support for 167 remote commands. The malware […]

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

Aug 17, 2026 // 23:54

Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-control (C2) framework used by Iranian nation-state hackers in attacks targeting entities in […]

China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud

Aug 14, 2026 // 11:13

The China-linked threat actor known as Jewelbug has been observed carrying out cyber espionage operations targeting governments and militaries, while simultaneously engaging in cryptocurrency fraud. […]

Plug and Pwn attack uses fake USB devices for Windows SYSTEM access

Aug 12, 2026 // 20:38

Security researchers have disclosed new “Plug and Pwn” attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure […]

Plug and Pwn attack uses fake USB devices for Windows SYSTEM access

Aug 12, 2026 // 20:37

Security researchers have disclosed new “Plug and Pwn” attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure […]

DeadLock ransomware uses blockchain to resist infrastructure takedown

Aug 12, 2026 // 01:17

The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity. The threat […]

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

Aug 11, 2026 // 21:46

The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT […]

Previous 1 2 3 4 … 13 Next