PDFs are the second most common file type used to deliver malware. Because they’re trusted for invoices, policies, and ...
The npm packages were available since July, have elaborately obfuscated malicious routines, and rely on a fake CAPTCHA to ...
Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...
Recently, security researchers Socket found 10 packages on npm targeting software developers, specifically those who use the ...
Cybersecurity researchers at Google’s Threat Intelligence Group (GTIG) have uncovered a sophisticated hacking campaign by a North Korean state-linked group ...
North Korean state-sponsored threat actors are now using public blockchains to host malicious code and deploy malware on ...
The typosquatted packages auto-execute on installation, fingerprint victims by IP, and deploy a PyInstaller binary to harvest ...
Attackers are using the open-source red-team tool RedTiger to build an infostealer that collects Discord account data and ...
North Korean threat group Famous Chollima is using blockchain technology to hide malware payloads in smart contracts, which ...
North Korean hackers expand cyber campaigns using blockchain-based malware to steal cryptocurrency and evade detection, ...
The North Korean threat actor linked to the Contagious Interview campaign has been observed merging some of the functionality ...
ClickFix, FileFix, fake CAPTCHA — whatever you call it, attacks where users interact with malicious scripts in their web browser are a fast-growing source of security breaches. ClickFix attacks prompt ...