…The new malware family was discovered by researchers at ecommerce security company Sansec, who found that the malicious code is loaded from a Google Tag Manager (GTM) container and executes on every…
…The malware has evolved and is now targeting customers of multiple banks and financial institutions across Europe in a phishing campaign aimed at stealing payment card data. After tricking victims with a…
Chinese hackers breach REDCap servers, steal medical research By Bill Toulas June 15, 2026 10:00 AM A China-linked espionage campaign targeted exposed REDCap servers to deploy the InfiniteRed malware and…
…Sophos says that running the binary leads to adding three files to the Startup folder: NOVupdate.exe, NOVupdate.exe.dat, and avk.dll. The campaign was initially discovered by Malwarebytes , whose researchers…
…Hulud malware delivered in the campaign targeted the theft of developer and cloud credentials, including GitHub tokens, npm publish tokens, AWS credentials, Kubernetes secrets, SSH keys, and .env files. Security researchers say…
…OX Security says the malware retains the same credential-stealing functionality as Mini Shai-Hulud but adds additional obfuscation layers, multi-stage payload delivery mechanisms, and enhanced data theft and credential-harvesting…
…Many of the infected packages are popular bioinformatics tools such as Dynamo, Spateo, CoolBox, U-FISH, and Napari-UFISH. The new campaign was discovered by application security company Socket and extended to…
…29 AM Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering credential-stealing malware targeting developers. The attacker hijacked valid OpenID Connect…
…Popular node-ipc npm package compromised to steal credentials GlassWorm malware attacks return via 73 OpenVSX "sleeper" extensions New macOS stealer campaign uses Script Editor in ClickFix attack New Infinity Stealer malware…
…Security (TLS) certificate verification, contacted attacker-controlled command-and-control (C2) infrastructure, downloaded a second-stage payload, and executed the payload as a detached hidden process," explains Microsoft. Cross-platform malware targets…
