Emergence of AgentBaiting Threat Vector The surging popularity of artificial intelligence tools has transformed skill directories into lucrative initial access points. Attackers target Model Context Protocol (MCP) server repositories to distribute malicious loads. Notably,...
Attackers injected malicious JavaScript into Okendo Reviews, a product review widget used by more than 18,000 brands. The compromised script loaded on store pages. After a few checks, it could show visitors a fake...
GitHub has filled up with fake repositories. They disguise themselves as ordinary developer projects. In reality, they push Trojans through links to ZIP archives. A developer using the alias Orchid uncovered the large campaign....
Malefactors are increasingly harnessing large language models to rapidly rewrite malicious code. This stratagem, christened “promptmorphism,” facilitates the virtually infinite synthesis of novel initial-stage loaders. Such a tactical maneuver profoundly confounds the detection of...
The architects of malicious software have themselves fallen prey to a vulnerability overlooked within their own infrastructure. This irony centers on StealC, a pervasive information stealer operating under the “Malware-as-a-Service” (MaaS) paradigm, renowned for...
Acronis researchers have reported a fresh campaign that employs a modified FileFix technique to deliver the StealC data stealer. The attackers staged a convincing, multilingual phishing operation that forges pages for various services —...
CyberArk specialists report that malefactors are mastering new methodologies to access users’ data without the necessity for passwords or multifactor authentication requests. A prevalent technique involves intercepting web sessions through the theft of cookie...
