Microsoft has warned of phishing campaigns specifically targeting government and public-sector organizations by abusing OAuth redirection mechanisms to deliver malware. Key Details of the Campaign Mitigation and […]
The QuickLens Chrome extension (version 5.8) was recently flagged for transforming from a legitimate tool into a malicious infostealer. According to reports from BleepingComputer, the extension was compromised […]
ScarCruft (also known as APT37), a North Korean state-sponsored threat actor, has launched a sophisticated cyber espionage campaign named Ruby Jumper. Recently documented by Zscaler ThreatLabz, the campaign […]
Threat actors are currently targeting gamers by distributing trojanized gaming utilities through browsers and chat platforms to deploy a multi-purpose Java-based Remote Access Trojan (RAT). Key Attack Details […]
A Russia-aligned threat actor known as UAC-0050 (also called DaVinci Group or Mercenary Akula) has expanded its operations beyond Ukraine to target a European financial institution involved in regional reconstruction. Campaign Details […]
A sophisticated supply chain worm campaign codenamed SANDWORM_MODE is actively targeting the npm ecosystem. This campaign uses malicious packages to harvest cryptocurrency keys, CI/CD secrets, and API […]
© Bulletproof Servers. All rights reserved.