ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...

New TELEPUZ malware spreads through ClickFix, then steals browser cookies, logs keystrokes, runs commands, and installs ...

CERT-In has issued a warning about a significant malware campaign targeting WhatsApp Web and Desktop users. Cybercriminals are exploiting compromised accounts to send infected Visual Basic Script ...

North Korea malware hidden inside SVG country flag images evaded every antivirus tool when Elastic Security Labs disclosed ...

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...

Cybercriminals are exploiting WhatsApp to infiltrate computers globally. By hijacking trusted accounts, attackers send malicious files disguised as business documents, tricking users into granting ...

A fileless malware framework is abusing Google’s Blogspot platform to deliver PureLog Stealer directly into computer memory, sharpening concerns that trusted web services are being turned into staging ...

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...