#malware
#malware

[ follow ]

A new 'top-tier' Chinese espionage group is stealing sensitive data

A China-linked group, Phantom Taurus, conducts covert cyber-espionage against governments, militaries, and critical infrastructure across Africa, the Middle East, and Asia.

Information security

fromTheregister

6 days ago

Microsoft spots XCSSET strain hiding in Apple dev projects

XCSSET macOS malware variant targets developers via infected Xcode projects, adding stealthy persistence, obfuscation, Firefox data theft, and crypto clipboard hijacking.

Information security

fromKotaku

1 week ago

Malware 'Game' On Steam Stole $32K From Cancer-Stricken Streamer

A malicious update to the Steam game BlockBlasters deployed malware that drained a streamer’s $32,000 in crypto during a cancer fundraiser.

#npm

fromBleepingComputer

1 week ago

Information security

NPM package caught using QR Code to fetch cookie-stealing malware

fromDataBreaches.Net

2 weeks ago

Information security

#malware#malware

A new 'top-tier' Chinese espionage group is stealing sensitive data

Microsoft spots XCSSET strain hiding in Apple dev projects

Malware 'Game' On Steam Stole $32K From Cancer-Stricken Streamer

NPM package caught using QR Code to fetch cookie-stealing malware

Self-propagating supply chain attack hits 187 npm packages - DataBreaches.Net

40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials

More npm packages poisoned, but would-be thieves get little

20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack

Supply-chain attacks on open source software are getting out of hand

NPM package caught using QR Code to fetch cookie-stealing malware

Self-propagating supply chain attack hits 187 npm packages - DataBreaches.Net

40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials

More npm packages poisoned, but would-be thieves get little

20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack

Supply-chain attacks on open source software are getting out of hand

Hackers are disguising malware as ChatGPT, Microsoft Office, and Google Drive to dupe workers

Steam game removed after cryptostealer takes over $150K

CrowdStrike Infested With "Self-Replicating Worms"

Mobile app security is a huge blind spot for developer teams - 93% are confident their applications are secure, but 62% reported breaches last year

Warning to all 1.8b iPhone users over new scam emptying bank accounts

Malicious URLs overtake email attachments as the biggest malware threat

Supply chain attack compromises npm packages to spread backdoor malware

CERT-UA Discovers LAMEHUG Malware Linked to APT28, Using LLM for Phishing Campaign

Warning to all 1.8b iPhone users over new scam emptying bank accounts

Malicious URLs overtake email attachments as the biggest malware threat

Supply chain attack compromises npm packages to spread backdoor malware

CERT-UA Discovers LAMEHUG Malware Linked to APT28, Using LLM for Phishing Campaign

Double trouble with CastleRAT malware, now in C and Python

Automated Sextortion Spyware Takes Webcam Pics of Victims Watching Porn

Why you should delete your browser extensions right now - or do this to stay safe

Anthropic blocks misuse of Claude for cybercrime

Malicious Go Module Poses as SSH Brute-Force Tool, Steals Credentials via Telegram Bot

Ex-Developer Jailed Four Years for Sabotaging Ohio Employer with Kill-Switch Malware

Developer jailed for malware that took out his employer

Ex-Developer Jailed Four Years for Sabotaging Ohio Employer with Kill-Switch Malware

Developer jailed for malware that took out his employer

Apache ActiveMQ attackers patch critical vuln after entry

Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems

New GodRAT Trojan Targets Trading Firms Using Steganography and Gh0st RAT Code

DripDropper Linux malware cleans up after itself - how it works

Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware

Weekly Recap: NFC Fraud, Curly COMrades, N-able Exploits, Docker Backdoors & More

Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks

Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems

New GodRAT Trojan Targets Trading Firms Using Steganography and Gh0st RAT Code

DripDropper Linux malware cleans up after itself - how it works

Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware

Weekly Recap: NFC Fraud, Curly COMrades, N-able Exploits, Docker Backdoors & More

Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks

Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures

Solana malware targeting Russian crypto developers

Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools

Ransomware crews don't care about your EDR

Ransomware group targets SharePoint zero-day

Ransomware crews don't care about your EDR

Ransomware group targets SharePoint zero-day

Adult sites are stashing exploit code inside racy .svg files

RubyGems, PyPI Hit by Malicious Packages Stealing Credentials, Crypto, Forcing Security Changes

Malicious NPM packages deceive WhatsApp developers

SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and Others

Webinar: How to Stop Python Supply Chain Attacks-and the Expert Tools You Need

A Single Poisoned Document Could Leak 'Secret' Data Via ChatGPT

Fake VPN and Spam Blocker Apps Tied to VexTrio Used in Ad Fraud, Subscription Scams

ClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections

Emergency communications on South Shore targeted by cyber attack

Toptal caught serving malware after GitHub compromise

Cyber Espionage Campaign Hits Russian Aerospace Sector Using EAGLET Backdoor

UNG0002 Group Hits China, Hong Kong, Pakistan Using LNK Files and RATs in Twin Campaigns

Cyber Espionage Campaign Hits Russian Aerospace Sector Using EAGLET Backdoor

UNG0002 Group Hits China, Hong Kong, Pakistan Using LNK Files and RATs in Twin Campaigns

Soco404 and Koske Malware Target Cloud Services with Cross-Platform Cryptomining Attacks

Coyote malware abuses Microsoft UIA to hunt banking creds

New Coyote Malware Variant Exploits Windows UI Automation to Steal Banking Credentials

Coyote malware abuses Microsoft UIA to hunt banking creds

New Coyote Malware Variant Exploits Windows UI Automation to Steal Banking Credentials

Ukrainians arrest alleged admin of major crime forum XSS

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations

Google wants to kill a massive Android TV botnet with lawyers

New Konfety Malware Variant Evades Detection by Manipulating APKs and Dynamic Code

#malware
#malware