Bitdefender reports rising abuse of the legacy MSHTA utility to deliver infostealers and loader malware Campaigns range from simple commodity threats like LummaStealer to advanced persistence tools such as PurpleFox Defenders are urged to restrict outdated scripting utilities and deploy layered sec… …
… The malware also reportedly suppressed execution errors and limited activity to Linux systems, the dominant operating system across servers, cloud environments, and many AI workloads. …
… Microsoft's latest findings suggest the scammers are simply adapting the formula to keep one step ahead of security tools – and betting that if a command runs in a legitimate terminal window, many users will assume it's just fine. ® cyber-crime malware windows 11 security
… While Microsoft's blog includes several recommendations directing people to use their security products to avoid this type of compromise, one vendor-neutral tip that we especially like involves educating users on how to spot social engineering campaigns. …
Security researchers at Malwarebytes have found a fake Windows 11 24H2 update campaign that steals sensitive data from Windows PC users. …
… "Because the Oyster malware was signed by a certificate from Microsoft's Artifact Signing service, the Windows operating system initially recognized the malware as legitimate software, when it would otherwise be flagged as suspicious or blocked entirely by security controls in the Windows operating… …
A wave of recent alerts from Microsoft Defender identifying a threat labeled “Cerdigent” on Windows systems is drawing the attention of users and security researchers worldwide, with early evidence suggesting the detections may be tied to the abuse of mis-issued digital certificates rather than a r… …
… Microsoft's recommendation is to update Defender to the latest available Security Intelligence version via Settings, then Windows Security, then Virus and Threat Protection, then Protection Updates. …
… But there are couple key and vendor-neutral security suggestions that we want to highlight. …
… Once signed, their malware appeared legitimate. Attackers then distributed the signed malware through tactics such as search manipulation and malicious ads, where users are more likely to trust what they encounter. AI then helped generate and refine these campaigns to reach a broader audience. …
