The GoldFactory group has launched a new wave of attacks targeting mobile-banking users across Southeast Asia. Disguising themselves as government agencies and well-known corporations, the attackers distribute tampered banking applications. According to Group-IB, more...
A new case of software supply-chain compromise has been uncovered on the crates.io platform: a malicious Rust package was silently infecting the workstations of Web3 developers, disguising itself as an auxiliary tool for the...
The Glassworm campaign targeting popular Visual Studio Code extensions has entered yet another phase — researchers are now documenting a third wave of malicious uploads to the OpenVSX repository and the Microsoft Visual Studio...
In the third quarter of 2025, Beazley Security Labs recorded a sharp surge in the activity of major ransomware groups and the emergence of new delivery mechanisms for infostealers. The primary cybercriminal campaigns centered...
For the PostHog team, developers of an open-source analytics platform, the recent npm-based attack has become the most serious security incident in the project’s history. The root of the breach was a malicious release...
North Korea’s Contagious Interview malware campaign continues to escalate its pressure on the JavaScript-development ecosystem. Threat actors affiliated with DPRK hacking units are massively uploading malicious packages to the npm repository, disguising spyware distribution...
Against the backdrop of a surge in schemes involving the remote manipulation of infected devices, a new tool for attacking Android has emerged on the cybercrime market. Threat-analysis firms report the appearance of several...
GreyNoise Labs has unveiled GreyNoise IP Check, an online service that allows users to determine whether their IP address has been observed participating in suspicious scanning activity linked to botnets or residential proxy networks....
During AWS’s major outage in October, Fortinet specialists uncovered a new botnet, ShadowV2, built on Mirai-derived malware and targeting IoT devices worldwide. According to FortiGuard Labs, the campaign appeared to be a “trial run”...
A malicious extension has been discovered in the Chrome catalog — an add-on that, without the owner’s knowledge, inserts a hidden fee into Solana transactions and diverts it to a wallet controlled by the...
Censys researchers have detailed a new web-attack technique known as EtherHiding, in which attackers conceal malicious code inside smart contracts on the Binance Smart Chain test network and deliver it through counterfeit CAPTCHA pages....
The CodeRED alert platform operated by OnSolve and maintained by the risk-management firm Crisis24 has fallen victim to a major cyberattack — an incident that disrupted emergency-notification systems relied upon by government agencies and...
