News

UK ties GRU to stealthy Microsoft 365 credential-stealing malware
The UK National Cyber Security Centre (NCSC) has formally attributed 'Authentic Antics' espionage malware attacks to APT28 ...
Computer Weekly1d
NCSC exposes Fancy Bear's Authentic Antics malware attacks
Amid a new round of UK government sanctions targeting Moscow's intelligence apparatus, the NCSC has formally attributed attacks orchestrated with a cleverly-designed malware to the GRU's Fancy Bear cy ...
GitHub users targeted with dangerous malware attacks - here's what we know
GitHub is an extremely popular platform in the open source world, and as such is under a constant barrage of attacks. This ...
PCMag1d
Google: This Malware Has Spread to Over 10 Million Android Devices
Google sues to stop the 'BadBox 2.0' malware, alleging the China-based culprits have spread the infection to no-name TV ...
Infosecurity Magazine1d
Russia Linked to New Malware Targeting Email Accounts for Espionage
Russian military intelligence-linked hackers are using a new malware called “Authentic Antics” to secretly access Microsoft cloud email accounts ...
Hackers Are Finding New Ways to Hide Malware in DNS Records
Newly published research shows that the domain name system—a fundamental part of the web—can be exploited to hide malicious ...
The Hacker News3d
⚡ Weekly Recap: Scattered Spider Arrests, Car Exploits, macOS Malware, Fortinet RCE and More
From Bluetooth exploits in vehicles to macOS backdoors and GitHub phishing tricks—this week’s threats go deeper than they appear.
North Korean hackers release malware-ridden packages into npm registry
Uploading malicious code to npm is just a setup. The real attack most likely happens elsewhere - on LinkedIn, Telegram, or ...
Cybernews5d
Massive browser hijack: extensions turn Trojan and infect 2.3M Chrome and Edge users
Over 2.3 million Chrome and Edge users were compromised by 18 seemingly legitimate browser extensions that turned into ...
Arabian Post5d
Crypto‑Looting Malware Masquerades as AI and Gaming Start‑ups
Cybersecurity firm Darktrace has revealed a sophisticated social engineering campaign targeting cryptocurrency users on Windows and macOS. The scheme employs fake start‑up companies themed around AI, ...