Evolution of the Golden Chickens Ecosystem Cybercriminals operating within the TAG-195 ecosystem have fundamentally restructured their malware architecture, adopting a highly modular approach. Consequently, compromised systems now only receive the specific functionalities required for...
Since late April 2026, compromised websites have been distributing a new modular malware with the curious name “TELEPUZ” through the ClickFix scheme. According to Elastic, the attackers replace a familiar error-fix prompt with instructions...
uBlock Origin, the popular ad-blocking extension, has gained new capabilities to protect users. It now detects and blocks websites that display malicious ClickFix pop-ups. These sites try to trick visitors into running dangerous commands...
Attackers injected malicious JavaScript into Okendo Reviews, a product review widget used by more than 18,000 brands. The compromised script loaded on store pages. After a few checks, it could show visitors a fake...
A new ClickFix malware campaign is turning Amazon’s trusted name against its own customers. Researchers at the Cofense Phishing Defense Center uncovered the scheme. Notably, the attack convinces victims to infect their own machines....
macOS users are once again being enticed by “simplistic remedies” for system optimization or disk purification, yet following such counsel may incur the steep price of compromised passwords, sensitive files, and cryptocurrency assets. Microsoft...
A solitary click upon a purported “error rectification” within a browser may precipitate the absolute compromise of a computational architecture, and the nascent “DeepLoad” malware vividly illustrates the velocity of this subversion. Executing a...
Apple has surreptitiously fortified the defensive architecture of macOS, introducing a mechanism poised to rescue patrons from one of the most insidious stratagems employed by malefactors. This nascent feature necessitates no configuration, awakening precisely...
The forensic savants at Sophos have chronicled a burgeoning wave of cyber offensives wherein digital marauders proliferate the MacSync infostealer targeting macOS via ClickFix infection chains. These campaigns predicate their success not upon software...
According to a report promulgated by IBM, ransomware syndicates have commenced experimenting with artificial intelligence. Specialists have unearthed an idiosyncratic malware strain christened Slopoly; forensic scrutiny of its codebase strongly suggests that the script...
Experts from the Insikt Group division have promulgated the inaugural comprehensive dossier regarding GrayCharlie, a threat syndicate that, since mid-2023, has been compromising WordPress repositories to disseminate deleterious payloads via fraudulent browser updates and...
To infiltrate a corporate network, adversaries are increasingly eschewing the search for server vulnerabilities or the deployment of intricate exploits. It has proven far more lucrative to adopt a simpler, more clandestine approach: usurping...
