Bitdefender reports rising abuse of the legacy MSHTA utility to deliver infostealers and loader malware Campaigns range from simple commodity threats like LummaStealer to advanced persistence tools such as PurpleFox Defenders are urged to restrict outdated scripting utilities and deploy layered sec… …
… ClickFix fake CAPTCHA attacks are spreading rapidly across the web Security researchers first identified ClickFix campaigns in 2024 as attackers began experimenting with copy-and-paste malware delivery methods. …
Australia warns of ClickFix attacks pushing Vidar Stealer malware By Bill Toulas May 7, 2026 02:00 PM The Australian Cyber Security Center ACSC is warning organizations of an ongoing malware campaign using the ClickFix social engineering technique to distribute the Vidar Stealer info-stealing malwa… …
… Native tools, fake update prompts, and trusted Apple, Microsoft, and Google branding now play a larger role in macOS malware campaigns. …
… "Attackers frequently leverage wartime themes such as emergency alerts, missile warnings, or security updates as social engineering lures to distribute surveillance malware and collect sensitive information," Pontiroli said. …
Research Fake job applications pack malware that kills endpoint detection before stealing data Russian-speaking attackers lure HR staff into downloading ISO files that disable defenses A Russian-speaking cyber criminal is targeting corporate HR teams with fake CVs that quietly install malware which… …
… The malware also reportedly suppressed execution errors and limited activity to Linux systems, the dominant operating system across servers, cloud environments, and many AI workloads. …
… The AI-written code Hutchins analyzed ought to have been detectable with typical “end point detection and response” security tools used in most companies and government agencies, Hutchins says, given that it followed standard patterns of behavior for malware. …
… Fake Apple domains and legitimate traffic can make malicious activity harder to spot with traditional security tools. Malicious DLLs hijacked trusted processes and executed malware inside them. …
… The new malware family was discovered by researchers at ecommerce security company Sansec, who found that the malicious code is loaded from a Google Tag Manager GTM container and executes on every page that loads it. …
