Category: Research
North Korean PolinRider Campaign Spreads 108 Malicious Packages Across npm, Go, and Chrome
Threat actors behind the Contagious Interview campaign have published 108 malicious packages and browser extensions across multiple ecosystems, with researchers warning the…
Silent Swap Clipper Hijacks Crypto Transactions via Fake Browser Extension
McAfee Labs has identified an active clipboard-hijacking campaign that swaps cryptocurrency wallet addresses mid-transaction using a malicious browser extension disguised as Google…
ARToken PhaaS Reveals Depth of EvilTokens Microsoft 365 Attack Toolkit
Cisco Talos researchers reverse-engineered a React-based phishing panel to expose over 80 API endpoints tied to the EvilTokens platform, revealing AI-assisted BEC…
Weekly Security Roundup: ATM Jackpotting Sentences, Open Source Zero-Days, Pegasus MEP Targeting
A Canadian hacktivist receives prison time, a researcher drops dozens of open source zero-days via LLM fuzzing, and two Venezuelans are sentenced…
North Korea-Linked npm Packages Impersonate Rollup Polyfills to Steal Dev Secrets
Two malicious npm packages discovered by JFrog masquerade as legitimate Rollup polyfill tooling, targeting developer environments for remote access and credential theft.
NetNut Residential Proxy Botnet Dismantled, 2 Million Devices Cut Off
A coordinated operation led by Google, the FBI, and industry partners has disrupted NetNut, one of the world's largest residential proxy botnets,…
Pegasus Spyware Hit MEP Who Was Actively Investigating Its Abuse
Citizen Lab researchers confirmed that a former European Parliament member serving on the PEGA Committee was infected with Pegasus spyware twice while…
Ousaban Banking Trojan Targets Iberian Bank Users via Fake PDF Lures
A Brazilian banking trojan is running a geo-filtered phishing campaign against Windows users in Spain and Portugal, using fake corrupted PDFs and…
ToddyCat Group Deploys Umbrij Malware to Hijack Gmail via Google API
The ToddyCat threat actor has been linked to a new malware family called Umbrij that abuses OAuth and the Google API to…
Google Loses Final EU Appeal, €4.1 Billion Android Antitrust Fine Stands
The Court of Justice of the European Union has dismissed Google's final appeal against a €4.1 billion antitrust fine, concluding an eight-year…
Supreme Court Ruling Puts EU-US Data Privacy Framework at Risk
A U.S. Supreme Court decision allowing presidents to fire FTC commissioners without cause has undermined a core pillar of the EU-US Data…
Google Loses Final EU Appeal, Owes €4.1 Billion in Android Antitrust Fine
The Court of Justice of the European Union has dismissed Google's last appeal against a €4.1 billion antitrust fine, affirming that Android…