Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by victims' browsers. It ultimately delivers CountLoader to Windows and macOS devices and a new remote access trojan named DeviceManager to Windows systems.
A new Russian loader-as-a-service named DOUBLECUP employs ClickFix attacks to conceal malicious code within PNG images cached by victims' browsers. This technique ultimately delivers CountLoader to Windows and macOS devices, as well as a new remote access trojan called DeviceManager to Windows systems.
Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensitive information.
Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensitive information.
Cybersecurity researchers discovered malicious npm packages targeting Alibaba developer tools with a cross-platform remote access trojan. The attack impersonates private packages under the @ali scope, splitting malicious loader functionality across multiple packages.
Cybersecurity researchers discovered malicious npm packages targeting Alibaba developer tools with a cross-platform remote access trojan. The attack impersonates private packages under the @ali scope, splitting malicious loader functionality across multiple packages.