Two malicious Python packages, zebo and cometlogger, were discovered on PyPI repository, targeting users worldwide. Zebo captures keystrokes and screenshots, while cometlogger steals sensitive data from popular platforms and monitors system activities. Both packages employ sophisticated te...
North Korean hackers from the TraderTraitor group stole $308 million in cryptocurrency from DMM Bitcoin through a sophisticated social engineering attack targeting Ginco, a Japanese wallet software company. The attackers compromised an employee using a malicious Python script, accessed une...
Clop ransomware group launches extortion campaign against 66 companies affected by Cleo data theft attacks, giving them 48 hours to respond to ransom demands. The attack exploits a zero-day vulnerability in Cleo's software products, potentially affecting thousands of organizations worldwid...
Following a technical failure in the Rockstar 2FA phishing-as-a-service platform, a newer service called FlowerStorm has gained prominence. Both services target Microsoft 365 credentials and share similar designs, with FlowerStorm primarily attacking service industries in North America, UK...
WhatsApp secured a landmark victory against NSO Group in a California federal court over unauthorized Pegasus spyware deployment. The court found NSO Group liable for exploiting WhatsApp's servers 43 times in May 2019, breaching terms of service and platform rules. The ruling marks a signi...
