bleepingcomputer.com
39 New Methods That Compromise Passkey Authentication
Researchers have identified 39 methods to compromise passkey authentication, exposing vulnerabilities in the infrastructure and user interfaces involved.
Malware
Stories tagged “Malware.”
30 stories
bleepingcomputer.com
CrowdStrike 'FalconFlank' Zero-Day Exploit Grants SYSTEM Privileges
CrowdStrike released a zero-day exploit named 'FalconFlank' that allows attackers to escalate privileges on up-to-date Windows systems.
bleepingcomputer.com
Coder's registry infrastructure compromised to push malicious modules
Coder's Cloudflare infrastructure compromised, delivering malicious Terraform modules containing credential-stealing code.
thehackernews.com
BraZetsu Malware Turns Compromised Windows Hosts Into Criminal Marketplace Inventory
Cybersecurity researchers have disclosed details of a sophisticated malware framework called BraZetsu that turns compromised systems into valuable assets for criminal markets.
thehackernews.com
US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries
RMM phishing campaign targeting US, 45% of activity
cointelegraph.com
US Officials Work with CrowdStrike to Fight Malware behind Crypto Theft
US officials and CrowdStrike disrupt malware that redirected $150,000 in crypto over 8 years.
thehackernews.com
Fake Software Installers Disable Windows Update and Weaken Microsoft Defender
Malware campaign uses fake websites to distribute malicious software, compromising multiple organizations and industries in China.
bleepingcomputer.com
Microsoft Defender flags legitimate Google search links as malicious
Microsoft Defender for Office 365 mistakenly flags legitimate Google search links as malicious, causing warnings and alerts.
thehackernews.com
Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
Russian hacker extradited from Cyprus faces charges for a 2016-2017 campaign using fake accounts to send malware-laced Excel attachments to thousands of users.
bleepingcomputer.com
US Charges Russian for Infecting 80,000 Freelancers with Malware
US federal grand jury indicted a Russian national for infecting thousands of freelancers with malware. Aktulaev was extradited from Cyprus and faces federal court in California.
bleepingcomputer.com
Sality botnet infrastructure dismantled in joint global takedown
International law enforcement agencies and private partners have taken down Sality malware infrastructure in a joint operation.
thehackernews.com
Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis
A Russia-aligned group, UAC-0099, is using a new technique called GuardBreaker to trick AI security tools by embedding dangerous prompts into malware.
bleepingcomputer.com
Microsoft Warns of TerminalFix Attacks Using Reverse Tunnels
Microsoft alerts about a new variant of ClickFix attacks that use fake Cloudflare CAPTCHA prompts to trick users into executing malicious PowerShell commands in Windows Terminal. The attacks lead to a multi-stage intrusion chain resulting in a reverse tunnel into the vict…
bleepingcomputer.com
Anthropic warns infostealer malware is hijacking Claude sessions to drain usage
Anthropic alerts users that malware is stealing Claude login sessions, leading to unauthorized usage and account access.
bleepingcomputer.com
Chrome Web Store extensions caught stealing crypto, browser data
Multiple Chrome and Edge extensions delivered malware framework to steal crypto, data, and inject malicious scripts. Google removed the extension from its marketplace.
thehackernews.com
TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor
Microsoft details new TerminalFix campaign targeting organizations with fake Cloudflare CAPTCHAs to deploy malicious PowerShell commands.
thehackernews.com
19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code
Researchers discover 19 Chrome and 1 Edge extension with malicious capabilities since 2024.
thehackernews.com
APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations
A Russian state-sponsored hacking group, APT28 (Fancy Bear), has deployed a new backdoor named HOOKEDGE, targeting government and diplomatic organizations in Romania, Spain, and Türkiye. This sophisticated malware, an evolution of HEADLACE, uses macro-enabled Word documen…
thehackernews.com
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
Two men charged in Australia for alleged role in TeamPCP cybercrime group, which compromised open-source security scanners and AI gateway.
thehackernews.com
Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode
Independent malware researcher documents a new Windows backdoor called SLEEPWALKER that waits for a specific packet before executing commands written in its own bytecode.
bleepingcomputer.com
Hackers abuse npm mirrors to host phishing redirect pages
Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare CAPTCHAs to redirect visitors to attacker-controlled websites.
decrypt.co
Dozens of Fake Firefox Wallet Extensions Linked to Crypto-Stealing Malware
A security firm has linked 77 Firefox extension identities to a campaign called the Offside Wallet Theft Factory, confirming 40 as malicious. These extensions impersonate popular crypto wallets, capturing recovery phrases through fake interfaces or modified code.
thehackernews.com
Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor
Seqrite Labs documents Operation QUICSILVER, a China-nexus cyber espionage campaign using Burmese-language graduation ceremony lures to deliver a Go-based QUICAgent backdoor against Myanmar's government and IT sectors.
thehackernews.com
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit
A Chinese-speaking cybercrime group dubbed UAT-10147 has been targeting Windows and Linux web servers globally, using AI-powered tools to scale server attacks and deploy malware for SEO fraud and data theft.
bleepingcomputer.com
ToxicPanda Android malware uses VPN permissions to block Google Play
The ToxicPanda Android malware has evolved with new malicious functionality, expanding its targeting to 349 applications and adding support for 167 remote commands. It now requests VPN service permissions to create a local interface that allows it to control network traff…
bleepingcomputer.com
Hackers Infect Android Car Head Units with Proxy Botnet Malware
Hackers use legitimate app to spread malware targeting Android car head units. Kaspersky notes first documented case of malware specifically for car head units.
thehackernews.com
14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2
Cybersecurity researchers found 14 trojanized npm packages that deliver an AI-powered Linux backdoor called RedC2 4.0.
bleepingcomputer.com
New SynkLoader malware pushed in Microsoft Teams phishing campaign
Malware family SynkLoader being distributed via fake lock screen in Microsoft Teams phishing campaigns to steal credentials.
thehackernews.com
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware developed by DoFun. The end goal of the malware is to serve a multi-stage downloader to enable ad fraud and creation of a proxy botnet.
bleepingcomputer.com
Hackers Abuse FTP Server Banners to Deliver New Windows Malware
Threat actors are using FTP server banners to hide commands that deliver two previously undocumented remote access trojans (RATs). Researchers found this technique has been in use since early July and remains operational.