Iranian hackers have transformed ubiquitous system administration tools into clandestine pathways for infiltrating highly secure networks. The threat actor known as Cavern Manticore leverages a novel, modular framework dubbed “Cavern.” They orchestrate sophisticated cyberattacks...
A browser search bar often looks safe. A bad Chrome extension, though, can turn it into a data trap before any results even show up. Microsoft recently found an extension called “Search for perplexity...
Researchers have uncovered a network of malicious extensions inside the official Microsoft Edge store. These add-ons masqueraded as useful tools and operated for years alongside legitimate extensions. Disguised as ad blockers, weather widgets, video...
A popular ad-blocking extension on YouTube proves far more perilous than its Chrome Web Store page suggests. Researchers from Island dismantled Adblock for YouTube recently. Consequently, they discovered an architecture capable of transforming this...
Generative AI as a Criminal Commodity Cybercriminals increasingly integrate artificial intelligence into traditional attack strategies. However, they frequently exploit this novel technology as a lucrative commodity. Recently, researchers investigated various illicit forums and dark...
GitHub has filled up with fake repositories. They disguise themselves as ordinary developer projects. In reality, they push Trojans through links to ZIP archives. A developer using the alias Orchid uncovered the large campaign....
Occasionally, the simplest method to conceal malicious software relies not upon intricate camouflage, but rather upon excessive digital weight. GoFlateLoader utilizes this precise technique. It is a Golang loader designed to deliver infostealers like...
macOS users are once again being enticed by “simplistic remedies” for system optimization or disk purification, yet following such counsel may incur the steep price of compromised passwords, sensitive files, and cryptocurrency assets. Microsoft...
A seemingly innocuous file transmitted via a support chat escalated into a significant crisis for DigiCert. An adversary masquerading as a client presented a malicious archive as a “customer screenshot,” successfully infiltrating systems utilized...
Adversaries have once again targeted the npm supply chain, though this incursion pursued a surgical and perilous objective: packages integral to developers within the SAP ecosystem. The malicious campaign, designated “Mini Shai-Hulud,” appears modest...
The GlassWorm campaign has resurfaced within the developer community, though the adversaries have adopted a more surreptitious operational profile. Rather than disseminating overtly malicious extensions via OpenVSX, they initially publish innocuous facsimiles of popular...
A vulnerability within the control panel of the Rhadamanthys infostealer unexpectedly provided a rare opportunity to safeguard victims, though it stopped short of a definitive victory over the adversaries. This narrative, unveiled at the...
