A deceptive cyber campaign infected over 18,000 devices globally by targeting amateur hackers with a fake XWorm RAT builder, distributed through platforms like GitHub and Telegram. The malware, which primarily affected systems in Russia, US, India, Ukraine, and Turkey, included features fo...
Two malicious PyPI packages impersonating DeepSeek AI tools were discovered, targeting developers to steal sensitive data including API keys, credentials, and access tokens. The packages, downloaded 222 times across multiple countries, have been removed from PyPI. Affected users are advise...
Russian cybercrime group "Crazy Evil" operates sophisticated social media scams targeting cryptocurrency and personal data through six specialized teams. Active since 2021, they've generated over $5M through malware distribution, identity fraud, and crypto theft, using traffers to redirect...
U.S. and Dutch authorities have dismantled a major cybercrime network operated by Pakistan-based group Saim Raza, seizing 39 domains in Operation "Heart Blocker." The network sold phishing toolkits and fraud tools since 2020, enabling BEC schemes that caused over $3M in losses. The marketp...
Google's Threat Intelligence Group reveals state-sponsored APT groups from 20+ countries are using Gemini AI for cyber operations. Iran leads in usage, focusing on defense reconnaissance and phishing, while China targets U.S. military systems. North Korea utilizes it for malware developmen...
