News

CSO Online6d
How to log and monitor PowerShell activity for suspicious scripts and commands
Attackers are increasingly abusing sanctioned tools to subvert automated defenses. Tracking your Windows fleet’s PowerShell ...
SecurityWeek2d
New ClickFix Malware Variant ‘LightPerlGirl’ Targets Users in Stealthy Hack
ClickFix uses social engineering to trick users into loading LOLBINS malware on their own devices, in this case using ...
SecurityWeek14d
ClickFix Attack Exploits Fake Cloudflare Turnstile to Deliver Malware
Researchers have discovered and analyzed a ClickFix attack that uses a fake Cloudflare ‘humanness’ check. The Cloudflare ...
The Hacker News9d
Rare Werewolf APT Uses Legitimate Software in Attacks on Hundreds of Russian Enterprises
Rare Werewolf APT uses phishing and legitimate tools to attack Russian and CIS firms, stealing credentials and deploying ...
Infosecurity Magazine3d
Threat Actors Target Victims with HijackLoader and DeerStealer
Cyber-attacks using HijackLoader and DeerStealer have been identified exploiting phishing tactics via ClickFix ...
Bleeping Computer27d
TikTok videos now push infostealer malware in ClickFix attacks
"This attack uses videos (possibly AI-generated) to instruct users to execute PowerShell commands, which are disguised as software activation steps. TikTok's algorithmic reach increases the ...
The Hacker News2d
Discord Invite Link Hijacking Delivers AsyncRAT and Skuld Stealer Targeting Crypto Wallets
The fact that payload delivery and data exfiltration occur via trusted cloud services such as GitHub, Bitbucket, Pastebin, ...
Discord flaw lets hackers reuse expired invites in malware campaign
Hackers are hijacking expired or deleted Discord invite links to redirect users to malicious sites that deliver remote access ...
TechRound15d
Bitdefender Finds 84% of Attacks Use Built In Windows Tools, Here’s How
Criminal groups once carried their own hacking software into a target network. Today they often use programmes that already ...
Fake Cloudflare CAPTCHA page laden with malware uncovered in the wild - here's how to stay secure and safe
A sophisticated yet deceptively simple phishing technique is currently circulating, using fake Cloudflare CAPTCHA pages to ...
TechJuice1d
New Winos 4.0 Malware Hits Windows via Fake Installers
New Winos 4.0 malware campaign uses fake VPN and browser installers to infiltrate Windows systems, signaling serious risk.