Tag: infection

Intellexa Leaks Reveal Zero-Days and Ads-Based Vector for Predator Spyware Delivery

Dec 5, 2025 1:32 PM

Tags: attack, country, infection, international, leak, spyware, zero-day

A human rights lawyer from Pakistan’s Balochistan province received a suspicious link on WhatsApp from an unknown number, marking the first time a civil society member in the country was targeted by Intellexa’s Predator spyware, Amnesty International said in a report.The link, the non-profit organization said, is a “Predator attack attempt based on the technical…
Intellexa remotely accessed Predator spyware customer systems, investigation finds

Dec 5, 2025 12:32 AM

Tags: infection, spyware

It was one of a trio of reports about the spyware vendor over the course of a day, with additional evidence about further infections among the findings. First seen on cyberscoop.com Jump to article: cyberscoop.com/intellexa-remotely-accessed-predator-spyware-customer-systems-investigation-finds/
Predator spyware uses new infection vector for zero-click attacks

Dec 4, 2025 10:32 PM

Tags: attack, infection, malicious, spyware

The Predator spyware from surveillance company Intellexa has been using a zero-click infection mechanism dubbed “Aladdin” that compromised specific targets when simply viewing a malicious advertisement. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/predator-spyware-uses-new-infection-vector-for-zero-click-attacks/
GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections

Dec 4, 2025 11:32 AM

Tags: android, attack, banking, cybercrime, government, group, infection, malware, mobile

Cybercriminals associated with a financially motivated group known as GoldFactory have been observed staging a fresh round of attacks targeting mobile users in Indonesia, Thailand, and Vietnam by impersonating government services.The activity, observed since October 2024, involves distributing modified banking applications that act as a conduit for Android malware, Group-IB said in a technical First…
Dissecting a new malspam chain delivering Purelogs infostealer

Nov 26, 2025 10:49 AM

Tags: attack, cybersecurity, infection, malware, threat

The AISI Research Center’s Cybersecurity Observatory publishes the report >>Dissecting a new malspam chain delivering Purelogs infostealer
New ClickFix attacks use fake Windows Update screens to fool employees

Nov 26, 2025 5:49 AM

Tags: access, attack, awareness, captcha, computer, control, data, defense, detection, edr, email, endpoint, exploit, group, infection, intelligence, malicious, malware, monitoring, network, okta, phishing, powershell, russia, tactics, threat, tool, training, update, windows

Run dialog box, Windows Terminal, or Windows PowerShell. This leads to the downloading of scripts that launch malware.Two new tactics are used in the latest ClickFix campaign, says Huntress:the use since early October of a fake blue Windows Update splash page in full-screen, displaying realistic “Working on updates” animations that eventually conclude by prompting the user to…
Would Your Business Survive a Black Friday Cyberattack?

Nov 25, 2025 4:49 PM

Tags: access, ai, api, application-security, attack, authentication, automation, backup, breach, business, cloud, compliance, container, control, credentials, cyber, cyberattack, cybercrime, cybersecurity, data, ddos, defense, encryption, exploit, finance, fraud, identity, infection, infrastructure, intelligence, Internet, login, malicious, mfa, monitoring, password, phishing, ransomware, resilience, risk, soar, software, strategy, threat, training, unauthorized

Would Your Business Survive a Black Friday Cyberattack? madhav Tue, 11/25/2025 – 13:54 Black Friday and Cyber Monday can make or break the year for retailers. Sales soar, carts fill, and data pours in. However, the same things that drive growth for retailers also draw in malefactors. For them, it’s open season. Cyber War Cloud…
Would Your Business Survive a Black Friday Cyberattack?

Nov 25, 2025 4:49 PM

Tags: access, ai, api, application-security, attack, authentication, automation, backup, breach, business, cloud, compliance, container, control, credentials, cyber, cyberattack, cybercrime, cybersecurity, data, ddos, defense, encryption, exploit, finance, fraud, identity, infection, infrastructure, intelligence, Internet, login, malicious, mfa, monitoring, password, phishing, ransomware, resilience, risk, soar, software, strategy, threat, training, unauthorized

Would Your Business Survive a Black Friday Cyberattack? madhav Tue, 11/25/2025 – 13:54 Black Friday and Cyber Monday can make or break the year for retailers. Sales soar, carts fill, and data pours in. However, the same things that drive growth for retailers also draw in malefactors. For them, it’s open season. Cyber War Cloud…
Russian-linked Malware Campaign Hides in Blender 3D Files

Nov 24, 2025 3:49 PM

Tags: infection, malware, russia

Morphisec has observed a new operation embedding StealC V2 malware in Blender project files, targeting users via 3D assets and launching a multi-stage infection chain First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/russian-malware-blender-3d-files/
Cybersecurity Snapshot: Global Agencies Target Criminal “Bulletproof” Hosts, as CSA Unveils Agentic AI Risk Framework

Nov 21, 2025 7:49 PM

Tags: access, advisory, ai, android, apple, attack, banking, breach, browser, chrome, cisa, ciso, cloud, compliance, control, credentials, credit-card, crypto, cve, cyber, cybercrime, cybersecurity, data, defense, detection, endpoint, extortion, finance, firewall, firmware, flaw, framework, google, governance, government, group, guide, Hardware, ibm, identity, infection, infrastructure, international, Internet, law, linux, malicious, malware, microsoft, mobile, monitoring, network, open-source, oracle, password, phishing, radius, ransomware, rat, resilience, risk, risk-assessment, risk-management, russia, scam, service, software, switch, technology, threat, tool, update, vulnerability, windows

Cyber agencies call on ISPs to help combat “bulletproof” internet hosts that shield cybercriminals. Meanwhile, the CSA introduced a new methodology to assess the risks of autonomous AI. Plus, get the latest on the CIS Benchmarks, drone-detection systems, and malware infections. Key takeaways Crackdown on “bulletproof” hosting: International cyber agencies are urging ISPs and network…
Cybersecurity Snapshot: Global Agencies Target Criminal “Bulletproof” Hosts, as CSA Unveils Agentic AI Risk Framework

Nov 21, 2025 7:49 PM

Tags: access, advisory, ai, android, apple, attack, banking, breach, browser, chrome, cisa, ciso, cloud, compliance, control, credentials, credit-card, crypto, cve, cyber, cybercrime, cybersecurity, data, defense, detection, endpoint, extortion, finance, firewall, firmware, flaw, framework, google, governance, government, group, guide, Hardware, ibm, identity, infection, infrastructure, international, Internet, law, linux, malicious, malware, microsoft, mobile, monitoring, network, open-source, oracle, password, phishing, radius, ransomware, rat, resilience, risk, risk-assessment, risk-management, russia, scam, service, software, switch, technology, threat, tool, update, vulnerability, windows

Cyber agencies call on ISPs to help combat “bulletproof” internet hosts that shield cybercriminals. Meanwhile, the CSA introduced a new methodology to assess the risks of autonomous AI. Plus, get the latest on the CIS Benchmarks, drone-detection systems, and malware infections. Key takeaways Crackdown on “bulletproof” hosting: International cyber agencies are urging ISPs and network…
NDSS 2025 Hitchhiking Vaccine: Enhancing Botnet Remediation With Remote Code Deployment Reuse

Nov 20, 2025 9:49 PM

Tags: android, botnet, dns, infection, infrastructure, Internet, law, malware, mobile, network, update

SESSION Session 3C: Mobile Security ———– ———– Authors, Creators & Presenters: Runze Zhang (Georgia Institute of Technology), Mingxuan Yao (Georgia Institute of Technology), Haichuan Xu (Georgia Institute of Technology), Omar Alrawi (Georgia Institute of Technology), Jeman Park (Kyung Hee University), Brendan Saltaformaggio (Georgia Institute of Technology) ———– PAPER Hitchhiking Vaccine: Enhancing Botnet Remediation With Remote…
NDSS 2025 Hitchhiking Vaccine: Enhancing Botnet Remediation With Remote Code Deployment Reuse

Nov 20, 2025 9:49 PM

Tags: android, botnet, dns, infection, infrastructure, Internet, law, malware, mobile, network, update

SESSION Session 3C: Mobile Security ———– ———– Authors, Creators & Presenters: Runze Zhang (Georgia Institute of Technology), Mingxuan Yao (Georgia Institute of Technology), Haichuan Xu (Georgia Institute of Technology), Omar Alrawi (Georgia Institute of Technology), Jeman Park (Kyung Hee University), Brendan Saltaformaggio (Georgia Institute of Technology) ———– PAPER Hitchhiking Vaccine: Enhancing Botnet Remediation With Remote…
WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide

Nov 19, 2025 2:49 PM

Tags: exploit, flaw, infection, router, russia

A newly discovered campaign has compromised tens of thousands of outdated or end-of-life (EoL) ASUS routers worldwide, predominantly in Taiwan, the U.S., and Russia, to rope them into a massive network.The router hijacking activity has been codenamed Operation WrtHug by SecurityScorecard’s STRIKE team. Southeast Asia and European countries are some of the other regions where…
New npm Malware Campaign Checks If Visitor Is a Victim or Researcher Before Initiating Infection

Nov 19, 2025 9:49 AM

Tags: attack, cyber, infection, malicious, malware, supply-chain, threat

The Socket Threat Research Team has uncovered a sophisticated npm malware campaign orchestrated by the threat actor dino_reborn, who deployed 7 malicious packages designed to distinguish genuine targets from security researchers before executing their payloads. This nuanced approach represents a significant evolution in supply chain attacks, blending traffic cloaking, anti-analysis techniques, and deceptive UI elements…
Formbook Malware Campaign Uses Malicious ZIP Files and Layered Scripting Techniques

Nov 14, 2025 1:49 PM

Tags: cyber, infection, malicious, malware, reverse-engineering, sans, tactics

A new campaign leveraging Formbook malware has emerged, showcasing sophisticated multi-stage infection tactics that underscore the importance of analyzing more than just executable files during malware investigations. When teaching malware reverse-engineering in courses like SANS FOR610, it’s critical to addressed that reverse engineering applies to every component in the infection chain, not just PE or…
SmartApeSG Uses ClickFix to Deploy NetSupport RAT

Nov 13, 2025 3:49 PM

Tags: access, attack, captcha, cyber, infection, malicious, rat, tactics

The SmartApeSG campaign, also known as ZPHP and HANEYMANEY, continues to evolve its infection tactics, pivoting to ClickFix-style attack vectors. Security researchers have documented the campaign’s latest methodology, which uses deceptive fake CAPTCHA pages to trick users into executing malicious commands that ultimately deploy NetSupport RAT a Remote Access Trojan capable of giving attackers complete…
New ClickFix Attack Targeting Windows and macOS Users to Deploy Infostealer Malware

Nov 13, 2025 9:49 AM

Tags: attack, credentials, cyber, exploit, infection, macOS, malware, social-engineering, software, threat, windows

Security researchers have uncovered a sophisticated malware campaign that leverages the ClickFix social engineering technique to distribute information-stealing malware across Windows and macOS platforms. The campaign demonstrates how threat actors are exploiting legitimate search queries for cracked software to deliver devastating payloads that compromise user credentials and sensitive data.paste.txt”‹ The infection chain begins when users…
GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites

Nov 11, 2025 5:20 PM

Tags: cybersecurity, infection, malware, wordpress

The malware known as GootLoader has resurfaced yet again after a brief spike in activity earlier this March, according to new findings from Huntress.The cybersecurity company said it observed three GootLoader infections since October 27, 2025, out of which two resulted in hands-on keyboard intrusions with domain controller compromise taking place within 17 hours of…
GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites

Nov 11, 2025 5:20 PM

Tags: cybersecurity, infection, malware, wordpress

The malware known as GootLoader has resurfaced yet again after a brief spike in activity earlier this March, according to new findings from Huntress.The cybersecurity company said it observed three GootLoader infections since October 27, 2025, out of which two resulted in hands-on keyboard intrusions with domain controller compromise taking place within 17 hours of…
Exploring the Pros and Cons of Web Application Firewalls (WAFs) FireTail Blog

Nov 11, 2025 2:20 PM

Tags: access, api, application-security, attack, authentication, breach, business, cloud, communications, control, data, detection, exploit, firewall, infection, injection, jobs, malicious, malware, network, open-source, programming, risk, software, sql, threat, unauthorized, update, vulnerability, waf, zero-day

Nov 11, 2025 – Jeremy Snyder – Over the last few years, web application attacks have become one of the leading causes of data breaches, making web application security increasingly important for overall security posture. In fact, web application attacks were involved in 26% of all breaches in 2022 according to the 2022 Verizon DBIR,…
Exploring the Pros and Cons of Web Application Firewalls (WAFs) FireTail Blog

Nov 11, 2025 2:20 PM

Tags: access, api, application-security, attack, authentication, breach, business, cloud, communications, control, data, detection, exploit, firewall, infection, injection, jobs, malicious, malware, network, open-source, programming, risk, software, sql, threat, unauthorized, update, vulnerability, waf, zero-day

Nov 11, 2025 – Jeremy Snyder – Over the last few years, web application attacks have become one of the leading causes of data breaches, making web application security increasingly important for overall security posture. In fact, web application attacks were involved in 26% of all breaches in 2022 according to the 2022 Verizon DBIR,…
Digital health can’t scale if cybersecurity falls behind

Nov 7, 2025 2:20 PM

Tags: access, ai, attack, breach, cloud, compliance, control, cyber, cyberattack, cybersecurity, data, detection, encryption, endpoint, exploit, framework, GDPR, governance, government, healthcare, HIPAA, identity, infection, intelligence, malicious, network, nist, phishing, privacy, ransomware, regulation, resilience, risk, risk-management, strategy, technology, threat, training, virus, vulnerability, zero-trust

The unique vulnerabilities of AI systems: Traditional security frameworks are not enough for AI. Attacks on algorithms take subtler forms. I often explain to my clients that when you corrupt data, you corrupt intelligence. Data poisoning occurs when malicious data is inserted into the training process, teaching the AI to make wrong decisions later. Imagine…
Digital health can’t scale if cybersecurity falls behind

Nov 7, 2025 2:20 PM

Tags: access, ai, attack, breach, cloud, compliance, control, cyber, cyberattack, cybersecurity, data, detection, encryption, endpoint, exploit, framework, GDPR, governance, government, healthcare, HIPAA, identity, infection, intelligence, malicious, network, nist, phishing, privacy, ransomware, regulation, resilience, risk, risk-management, strategy, technology, threat, training, virus, vulnerability, zero-trust

The unique vulnerabilities of AI systems: Traditional security frameworks are not enough for AI. Attacks on algorithms take subtler forms. I often explain to my clients that when you corrupt data, you corrupt intelligence. Data poisoning occurs when malicious data is inserted into the training process, teaching the AI to make wrong decisions later. Imagine…
ClickFix Attack Evolves: Weaponized Videos Trigger Self-Infection Tactics

Nov 7, 2025 2:20 PM

Tags: attack, awareness, cyber, defense, infection, malicious, phishing, social-engineering, tactics, threat, tool

ClickFix attacks have surged dramatically over the past year, cementing their position as pivotal tools in the modern attacker’s arsenal. These sophisticated social engineering campaigns coerce users into executing malicious code on their own devices, bypassing traditional awareness defenses that focus on preventing suspicious clicks, dodgy downloads, and phishing websites. During a recent threat briefing…
ClickFix Attack Evolves: Weaponized Videos Trigger Self-Infection Tactics

Nov 7, 2025 2:20 PM

Tags: attack, awareness, cyber, defense, infection, malicious, phishing, social-engineering, tactics, threat, tool

ClickFix attacks have surged dramatically over the past year, cementing their position as pivotal tools in the modern attacker’s arsenal. These sophisticated social engineering campaigns coerce users into executing malicious code on their own devices, bypassing traditional awareness defenses that focus on preventing suspicious clicks, dodgy downloads, and phishing websites. During a recent threat briefing…
ClickFix Attack Evolves: Weaponized Videos Trigger Self-Infection Tactics

Nov 7, 2025 2:20 PM

Tags: attack, awareness, cyber, defense, infection, malicious, phishing, social-engineering, tactics, threat, tool

ClickFix attacks have surged dramatically over the past year, cementing their position as pivotal tools in the modern attacker’s arsenal. These sophisticated social engineering campaigns coerce users into executing malicious code on their own devices, bypassing traditional awareness defenses that focus on preventing suspicious clicks, dodgy downloads, and phishing websites. During a recent threat briefing…
Digital health can’t scale if cybersecurity falls behind

Nov 7, 2025 2:20 PM

Tags: access, ai, attack, breach, cloud, compliance, control, cyber, cyberattack, cybersecurity, data, detection, encryption, endpoint, exploit, framework, GDPR, governance, government, healthcare, HIPAA, identity, infection, intelligence, malicious, network, nist, phishing, privacy, ransomware, regulation, resilience, risk, risk-management, strategy, technology, threat, training, virus, vulnerability, zero-trust

The unique vulnerabilities of AI systems: Traditional security frameworks are not enough for AI. Attacks on algorithms take subtler forms. I often explain to my clients that when you corrupt data, you corrupt intelligence. Data poisoning occurs when malicious data is inserted into the training process, teaching the AI to make wrong decisions later. Imagine…
ClickFix malware attacks evolve with multi-OS support, video tutorials

Nov 6, 2025 4:19 PM

Tags: attack, detection, guide, infection, malware

ClickFix attacks have evolved to feature videos that guide victims through the self-infection process, a timer to pressure targets into taking risky actions, and automatic detection of the operating system to provide the correct commands. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/clickfix-malware-attacks-evolve-with-multi-os-support-video-tutorials/
ClickFix malware attacks evolve with multi-OS support, video tutorials

Nov 6, 2025 4:19 PM

Tags: attack, detection, guide, infection, malware

ClickFix attacks have evolved to feature videos that guide victims through the self-infection process, a timer to pressure targets into taking risky actions, and automatic detection of the operating system to provide the correct commands. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/clickfix-malware-attacks-evolve-with-multi-os-support-video-tutorials/