Research Fake job applications pack malware that kills endpoint detection before stealing data Russian-speaking attackers lure HR staff into downloading ISO files that disable defenses A Russian-speaking cyber criminal is targeting corporate HR teams with fake CVs that quietly install malware which… …
… In March, security shop Huntress warned about a similar malware campaign using OpenClaw , the already risky AI agent platform, as a GitHub lure to deliver the same two payloads. …
… "Attackers frequently leverage wartime themes such as emergency alerts, missile warnings, or security updates as social engineering lures to distribute surveillance malware and collect sensitive information," Pontiroli said. …
Security CPUID site hijacked to serve malware instead of HWMonitor downloads Six-hour breach turned trusted links into a coin toss between legit tools and credential stealers Visitors to the CPUID website were briefly exposed to malware this week after attackers hijacked part of its backend, turnin… …
… Once again, the baddies use real tools like AnyDesk - not custom malware - to hide in plain sight. However, none of the final payloads are signed, and this should be another indication to defenders that they are dealing with malware, not legit enterprise software. …
… Some attacks succeeded While Microsoft's threat intel team and other security researchers have documented attackers using agentic AI to generate malware , agents' code-writing skills can't yet rival those of humans, DeGrippo told us. …
… And as the threat hunters note, "this campaign serves as a reminder that social engineering remains a primary threat to both Windows and macOS users." ® cyber-crime security malware cybercrime
… Microsoft's latest findings suggest the scammers are simply adapting the formula to keep one step ahead of security tools – and betting that if a command runs in a legitimate terminal window, many users will assume it's just fine. ® cyber-crime malware windows 11 security
… The malware campaign began in late February, when the attackers took advantage of a misconfiguration in Trivy's GitHub Actions environment to steal a privileged access token that allowed the manipulation of CI/CD, according to Aqua Security . …
… So with this success, I expect to see more." Vuln scanner as initial attack vector TeamPCP compromised Trivy, an open source vulnerability scanner maintained by Aqua Security in late February, then injected credential-stealing malware into the scanner on March 16 through the binary, GitHub Actions,… …