… Once again, the baddies use real tools like AnyDesk - not custom malware - to hide in plain sight. However, none of the final payloads are signed, and this should be another indication to defenders that they are dealing with malware, not legit enterprise software. …
… "Attackers frequently leverage wartime themes such as emergency alerts, missile warnings, or security updates as social engineering lures to distribute surveillance malware and collect sensitive information," Pontiroli said. …
… In March, security shop Huntress warned about a similar malware campaign using OpenClaw , the already risky AI agent platform, as a GitHub lure to deliver the same two payloads. …
Research State snoops and spyware vendors planting info-stealing malware on iPhones, Google warns Darksword is the second iOS exploit chain in a month A new exploit kit targeting iPhone users and stealing their sensitive data is being abused by "multiple" spyware vendors and suspected nation-state … …
… And as the threat hunters note, "this campaign serves as a reminder that social engineering remains a primary threat to both Windows and macOS users." ® cyber-crime security malware cybercrime
Security CPUID site hijacked to serve malware instead of HWMonitor downloads Six-hour breach turned trusted links into a coin toss between legit tools and credential stealers Visitors to the CPUID website were briefly exposed to malware this week after attackers hijacked part of its backend, turnin… …
… The attacker used that access to take over the employee's Vercel Google Workspace account, which enabled them to gain access to some Vercel environments and environment variables that were not marked as “sensitive.” Context.ai has also published a security bulletin that reveals a March incident tha… …
Security Ransomware crims abused Cisco 0-day weeks before disclosure, says Amazon security boss Interlock's post-exploit toolkit exposed Ransomware criminals exploited CVE-2026-20131, a maximum-severity bug in Cisco Secure Firewall Management Center software, as a zero-day vulnerability more than a… …
… One of the NCSC's earlier advisories, dated April 2023, noted that similar attacks on Cisco routers resulted in APT28 deploying Jaguar Tooth malware , establishing backdoors for follow-on attacks. ® security russia ncsc dns cybersecurity cyber-crime
… Some attacks succeeded While Microsoft's threat intel team and other security researchers have documented attackers using agentic AI to generate malware , agents' code-writing skills can't yet rival those of humans, DeGrippo told us. …