… "Attackers frequently leverage wartime themes such as emergency alerts, missile warnings, or security updates as social engineering lures to distribute surveillance malware and collect sensitive information," Pontiroli said. …
Research Fake job applications pack malware that kills endpoint detection before stealing data Russian-speaking attackers lure HR staff into downloading ISO files that disable defenses A Russian-speaking cyber criminal is targeting corporate HR teams with fake CVs that quietly install malware which… …
… Microsoft's latest findings suggest the scammers are simply adapting the formula to keep one step ahead of security tools – and betting that if a command runs in a legitimate terminal window, many users will assume it's just fine. ® cyber-crime malware windows 11 security
… While Microsoft's blog includes several recommendations directing people to use their security products to avoid this type of compromise, one vendor-neutral tip that we especially like involves educating users on how to spot social engineering campaigns. …
… And as the threat hunters note, "this campaign serves as a reminder that social engineering remains a primary threat to both Windows and macOS users." ® cyber-crime security malware cybercrime
… "Attackers are starting to really look at the supply chain and open source packages, and figure out ways to compromise developers to deliver malware or gather data, depending on the type of threat," Biasini said. ® cyber-crime open source linux foundation google cloud cybercrime security
… In March, security shop Huntress warned about a similar malware campaign using OpenClaw , the already risky AI agent platform, as a GitHub lure to deliver the same two payloads. …
… "Users should never run scripts or commands shared through messages, calls, or chats without prior approval from their IT or security teams," Redmond warns. ® apple north korea microsoft cybercrime cyber-crime security
… The malware campaign began in late February, when the attackers took advantage of a misconfiguration in Trivy's GitHub Actions environment to steal a privileged access token that allowed the manipulation of CI/CD, according to Aqua Security . …
… Some attacks succeeded While Microsoft's threat intel team and other security researchers have documented attackers using agentic AI to generate malware , agents' code-writing skills can't yet rival those of humans, DeGrippo told us. …