Cybersecurity researchers have discovered a sophisticated attack campaign using fake CAPTCHA pages to trick users into installing the CORNFLAKE.V3 backdoor. The "ClickFix" scam directs victims to malicious pages that prompt them to execute PowerShell commands, installing malware that can e...
Researchers have discovered two malicious Visual Studio Code extensions that deployed ransomware through PowerShell commands. Though now removed from the marketplace, these extensions encrypted files in a test folder and demanded payment without providing transaction details, suggesting ea...
North Korean state-sponsored hacking group Kimsuky (APT43) launches DEEP#DRIVE campaign targeting South Korean business, government, and cryptocurrency sectors. The sophisticated cyber espionage operation uses Korean-language phishing emails with malicious documents, multi-stage PowerShell...
North Korean hacking group Kimsuky has adopted a new social engineering tactic targeting international organizations. Posing as South Korean officials, hackers send spear-phishing emails with PDF attachments that redirect victims to fake registration pages, tricking them into executing mal...
A global malware campaign using fake CAPTCHA verification systems to spread the Lumma information stealer has been discovered, targeting multiple countries and industries. The attack tricks users into executing malicious commands through Windows Run, deploying PowerShell scripts that bypas...
