Amid a surge in cybercriminal activity, Darktrace has uncovered a new campaign powered by the ShadowV2 botnet. Researchers first observed the malicious infrastructure on June 24, 2025, when their traps were triggered. At the...
Cybercriminals have launched a large-scale campaign against macOS users, disguising malware as popular applications. The alert comes from LastPass, which reported that its own product was among those impersonated. Distribution is carried out through...
Artificial intelligence has made web development accessible to the masses: today, even those without programming skills can build a website or application using AI-powered services. These platforms enable projects to launch with remarkable speed...
The BlackLock group, formerly known as El Dorado, has in recent months established itself as one of the most prominent actors in the ransomware arena. Research by the AhnLab Security Intelligence Center (ASEC) reveals...
SentinelLABS researchers have uncovered what they describe as the earliest known sample of malware embedding LLM capabilities — a specimen dubbed MalTerminal. Presented at LABScon 2025, their report catalogs a collection of artifacts: a...
A phishing campaign targeting figures in the cryptocurrency industry has come to light after researcher José A. Gómez Ledesma of the Quetzal team reported a string of attacks masquerading as invitations to appear on...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about two distinct malware frameworks uncovered within the network of an unnamed organization, following the exploitation of newly disclosed vulnerabilities in Ivanti...
Qilin continues to dominate the ransomware landscape, outpacing all rival groups in the sheer number of documented incidents. According to a recent report from Cyble, the gang struck 104 organizations in August alone, while...
Operators of the SystemBC botnet have assembled a global fabric built on compromised commercial virtual servers, sustaining roughly 1,500 active nodes each day. These machines have been repurposed into an infrastructure for relaying malicious...
Experts from Zscaler ThreatLabz have uncovered two malicious packages in the PyPI repository that, upon installation and import, secretly deploy the SilentSync Python trojan—a threat capable of seizing control of developer environments and exfiltrating...
Researchers from the Lat61 Threat Intelligence Team have published a comprehensive analysis of Raven Stealer, a lightweight, furtive infostealer written in Delphi and C++. The report details its credential-theft capabilities, methods for clandestine exfiltration...
Developers of the PureHVNC remote-access trojan have adopted a new level of concealment, brazenly using GitHub to host source code and modules for their malicious toolkit. That is the conclusion of Check Point Research...
