North Korean hackers behind the "Contagious Interview" campaign are evolving their malware arsenal by merging BeaverTail and OtterCookie capabilities and pioneering the use of blockchain networks as command-and-control servers. The group targets job seekers through fake recruitment scams, ...
A 20-year-old Scattered Spider cybercrime gang member received a 10-year federal prison sentence for orchestrating cryptocurrency thefts and cyberattacks through sophisticated SIM swapping attacks that stole at least $800,000. The case highlights the growing threat of cybercriminal allianc...
Socket researchers discovered seven malicious PyPI packages impersonating "Coffin" that accumulated 55,000+ downloads over four years. The malware used Gmail SMTP servers for initial reconnaissance and WebSockets for persistent access, enabling attackers to execute commands, exfiltrate dat...
North Korean threat actors are aggressively targeting cryptocurrency and Web3 sectors to fund weapons programs and bypass sanctions, according to Mandiant's M-Trends 2025 report. Multiple sophisticated groups (UNC1069, UNC4899, UNC5342, UNC4736, UNC3782) employ custom malware, social engin...
New clipper malware "MassJacker" targets users seeking pirated software through fake download sites. The sophisticated attack chain delivers malware that monitors clipboard content and replaces cryptocurrency wallet addresses with attacker-controlled ones. Using advanced evasion techniques...
