Microsoft reports Russian APT29 Midnight Blizzard hijacking captive portals in hotels and conference centers Victims redirected to fake Microsoft 365 logins or bogus update pages, spreading CornFlake and CocoShell malware CornFlake steals files, credentials, and device data; CocoShell targets brows… …
Bitdefender reports rising abuse of the legacy MSHTA utility to deliver infostealers and loader malware Campaigns range from simple commodity threats like LummaStealer to advanced persistence tools such as PurpleFox Defenders are urged to restrict outdated scripting utilities and deploy layered sec… …
… When a hallucinated package gets recommended by a coding assistant, an attacker who registered that name in advance can deliver malware directly. …
… Watch out for this info stealing malware When they run the command, it triggers a piece of malware to be downloaded and installed to a victim's computer. …
… Same goes for sites that have “repeatedly received suspicious notification warnings”. …
… Security If a remote session fails, hackers will come to install malware in person. Security NordVPN warns GTA 6 fans about fake beta keys, phishing pages, Android adware, and malware disguised as early access downloads. …
Google GTIG exposes UNC6508, a PRC‑linked group exploiting REDCap servers with custom INFINITERED malware Attackers stole credentials, exfiltrated sensitive data via manipulated compliance rules, and hid for over a year Gmail accounts tied to campaign disabled; admins urged to enforce phishing‑resi… …
… In classic DLL sideloading fashion, the updater runs the malicious DLL which, in turn, deploys a loader malware called DonutLoader. …
… There have been other cases of criminals using a fake free VPN to spread malware , so treat suspiciously cheap apps as a red flag . …
… Cybersecurity researchers Jamf published an in-depth report on the malware, noting CrashStealer is most likely distributed via a fake software site that was only registered recently. …
