…The researchers did not disclose the name of the targeted organization. In the first stage, Seedworm performed host and domain reconnaissance, followed by antivirus enumeration via WMI, screenshot capture, and the download…
…The Worker module performs the actual espionage operations, such as: keylogging capturing screenshots harvesting data from the filesystem performing system and network reconnaissance collecting email/MAPI data (including Outlook downloads) monitoring windows…
… It also downloads hostname data from Common Crawl parquet files and uses them as new targets for the scanning processscanning targets. …
… In a report today, ThreatFabric says that the malware is disguised as TikTok or streaming apps and targets banking and cryptocurrency wallets of users in France, Italy, and Austria. …
GPU mining malware spreads via SEO poisoning, AI chatbots By Ionut Ilascu May 27, 2026 05:31 PM Threat actors are targeting systems with high-performance computers in an ongoing cryptojacking campaign spread through a coordinated SEO poisoning operation that also manipulated AI chatbot recommendati… …
Windows 11 KB5089573 update released with performance improvements By Sergiu Gatlan May 27, 2026 04:33 AM Microsoft has released the KB5089573 preview cumulative update for Windows 11 versions 25H2 and 24H2, which comes with 30 changes, including performance and reliability improvements. …
… It targets both Chromium-based and Firefox web browsers and extracts stored data to text files while bypassing encrypted password protections. …
… Password Managers Become High-Value Targets The most significant late-stage evolution observed in the campaign involved password-manager-related collection. …
… The threat actor advertises Claude-Pro as a "high-performance relay service designed specifically for Claude-Code" developers. …
… Next, the infostealer targets the following: Browser data from Google Chrome, Mozilla Firefox, Brave, Microsoft Edge, Opera, Vivaldi, Arc, and Orion Cryptocurrency wallet browser extensions, including MetaMask and Phantom Password manager browser extensions, including 1Password, Bitwarden, and Last… …