Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.

Maccy users are being warned about fake sites after researchers found malware using the app’s name to steal Mac login ...

A random web page should not feel as risky as installing a shady app. That is what makes this browser-only ransomware technique so uncomfortable. It can use Chrome’s own File System Access API to ...

Jamf Threat Labs has issued a report on new malware that users of the third-party clipboard manager Maccy need to be aware of ...

Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs ...

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

Anyone who has verified their identity online by clicking a checkbox or identifying traffic lights in a grid has encountered ...

Fortinet says the Ousaban trojan uses geofenced phishing PDFs and steganography to steal banking credentials from users in Spain and Portugal.

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

Fortinet says the May 2026 Ousaban campaign uses PDF lures, geofencing, and steganography to target Windows banking users.

EncryptPro handles the basics of encrypting your important files at no charge, while a subscription gets you enhanced features and convenience. It’s a bit rough around the edges, but it shows great ...