A large-scale phishing campaign using nearly 1,000 fake Reddit and WeTransfer pages has been discovered distributing Lumma Stealer malware. The attack uses fake Reddit discussions with WeTransfer links to lure victims to malicious sites, where the information-stealing malware is deployed t...
A new variant of Banshee Stealer malware targets macOS users with enhanced stealth capabilities, incorporating Apple's XProtect encryption to evade detection. Distributed through phishing sites and fake repositories, it steals data from browsers, crypto wallets, and various files. The malw...
Email spoofing remains a significant cybersecurity threat as attackers exploit abandoned domains and bypass security protocols like DKIM, DMARC, and SPF. Recent campaigns, including the "Butcher Shop" operation targeting Microsoft 365 credentials, demonstrate sophisticated techniques using...
A new cyber attack campaign leverages Microsoft Teams to distribute DarkGate malware, with attackers posing as client representatives to gain system access. The sophisticated operation involves email flooding, social engineering through Teams, and deployment of remote access tools. DarkGat...
Russian state-linked hackers conduct sophisticated phishing attacks against Ukrainian defense sector, using fake conference invites to deploy malware for stealing credentials and accessing military systems. The campaign, attributed to UAC-0185/UNC4221, targets battlefield intelligence and ...
