Cybersecurity researchers have discovered sophisticated malware campaigns targeting developers through four malicious npm packages that accumulated over 3,600 downloads before removal. The attacks featured complex multi-stage operations, including transitive dependency chains, obfuscated J...
A malicious free Steam game "PirateFi" was discovered distributing Vidar infostealer malware, potentially affecting up to 1,500 users. The malware, hidden in the game's executable file, could steal credentials, browser data, and cryptocurrency wallet information. Steam has removed the game...
A malicious SDK called "SparkCat" has been discovered targeting cryptocurrency users through compromised Android and iOS apps. The campaign, affecting 28 apps with over 242,000 downloads, uses OCR technology to steal crypto wallet recovery phrases from device images. This marks the first d...
North Korean Lazarus Group launches sophisticated malware campaign targeting job seekers through fake LinkedIn recruitment for cryptocurrency and travel positions. The multi-platform attack affects Windows, macOS, and Linux systems, using fake DEX project repositories to deploy malware inc...
A sophisticated malware campaign called SparkCat is targeting cryptocurrency users through fake apps on official app stores, using OCR technology to steal wallet recovery phrases from photos. With over 242,000 downloads on Google Play Store, the malware masquerades as legitimate AI and Web...
