Browser extension malware infected 8.8M users in DarkSpectre attack

Browser extensions turned malicious after years of legitimate operation in DarkSpectre campaign affecting millions. The ...

Fake error popups are spreading malware fast

Cybercriminals use ErrTraffic tool to automate malware distribution through fake browser error messages, with attacks ...

Astaroth banking malware returns with WhatsApp-based worm targeting Brazil

Dubbed “Boto-Cor-de-Rosa,” the new campaign includes the addition of a WhatsApp web-based worm that allows the malware to spread itself by using a victim’s WhatsApp contacts versus previous Astaroth ...
The Register on MSN

Yes, criminals are using AI to vibe-code malware

They also hallucinate when writing ransomware code Interview With everyone from would-be developers to six-year-old kids ...
Cryptopolitan on MSN

Malicious Bitcoin npm packages spread NodeCordRAT malware before takedown

Researchers at Zscaler ThreatLabz have found three malicious Bitcoin npm packages that are meant to implant malware named ...

900,000 Users Hit as Malicious Chrome Extensions Steal ChatGPT, DeepSeek Chats

OX Security reveals how malicious Chrome extensions exposed AI chats from ChatGPT and DeepSeek, silently siphoning sensitive ...

ClickFix attack uses fake Windows BSOD screens to push malware

A new ClickFix social engineering campaign is targeting the hospitality sector in Europe, using fake Windows Blue Screen of ...
Infosecurity Magazine

Ghost Tap Malware Fuels Surge in Remote NFC Payment Fraud

More than 54 malicious APK samples have been identified, many disguised as legitimate financial or payment apps. Once ...
SecurityWeek

MacSync macOS Malware Distributed via Signed Swift Application

New MacSync Stealer version is executed via a signed and notarized Swift application, eliminating the need for direct terminal interaction.
Infosecurity Magazine

Versatile Malware Loader pkr_mtsi Delivers Diverse Payloads

The packer plays a key role in initial access operations. Rather than delivering a single malware family, pkr_mtsi has been ...
TechJuice

New Android Malware Can Now Harvest Data From Your Messages & Bank Accounts

Android malware operations evolve with droppers SMS theft and remote access tools spreading fast and risking user data and bank accounts.

New GlassWorm Malware Wave Targets Macs Through Fake Crypto Wallet Tools

A new wave of the GlassWorm malware is now targeting macOS developers by hiding malicious code inside fake Visual Studio Code ...