A new ransomware strain known as 01flip, written in Rust, has begun appearing with increasing frequency in attacks against organizations across the Asia-Pacific region. According to Palo Alto Networks’ Unit 42, the activity has...
The emergence of a new malicious tool within the React2Shell attack chain has become a notable development amid the surge of compromises that followed the disclosure of CVE-2025-55182. This time, the activity goes far...
Researchers at Securonix have uncovered a multi-layered malware campaign designed to surreptitiously deploy the NetSupport RAT remote access tool. The attack unfolds through a series of carefully obfuscated stages, each engineered for maximum stealth...
Cisco Talos has uncovered a new DeadLock ransomware campaign in which attackers exploit a vulnerable Baidu Antivirus driver (CVE-2024-51324) to disable EDR systems using the Bring Your Own Vulnerable Driver (BYOVD) technique, dismantle defenses...
A previously obscure Linux backdoor known as GhostPenguin has emerged from the shadows thanks to automated threat hunting, in which Trend Research leveraged AI to analyze thousands of undetected samples from VirusTotal. Analysts uncovered...
Experts at Doctor Web have identified a new click-fraud trojan, Trojan.ChimeraWire, which disguises itself as the activity of a real user and artificially boosts website engagement metrics in search results. Infected Windows machines automatically...
The financially motivated group Storm-0249, long known as a broker of initial access for ransomware operators, has markedly refined its tradecraft, triggering a new wave of alarm among cybersecurity professionals. Analysts at ReliaQuest have...
A newly discovered vulnerability in Node.js, designated CVE-2025-55182 and informally dubbed React2Shell, has become a favored weapon of botnets within mere days of its disclosure. Operators are now launching widespread attacks against vulnerable web...
The widow of Saudi dissident journalist Jamal Khashoggi has filed a complaint with the French prosecutor’s office, alleging that her phone was infected with Israeli spyware shortly before her husband’s murder. Hanan Elatr Khashoggi...
Researchers from Howler Cell have detailed an underground marketplace for compromised websites operated by students and freelancers across Asia. At the center of their latest report is a cybersecurity student from Bangladesh who aspires...
The launch of the IPCola service on underground forums in 2023 initially appeared to be yet another proxy marketplace, but the scale of the advertised address pool and the origins of its traffic quickly...
The Iranian threat group MuddyWater has intensified its cyber-espionage operations with the deployment of a new malicious program known as UDPGangster. According to Fortinet’s FortiGuard Labs, the attacks targeted Turkey, Israel, and Azerbaijan. The...
