The long-running Contagious Interview campaign is now hiding BeaverTail and InvisibleFerret payloads inside JSON storage ...

China-linked APT24 hackers have been using a previously undocumented malware called BadAudio in a three-year espionage campaign that recently switched to more sophisticated attack methods.

TamperedChef spreads through fake installers and SEO abuse, delivering a persistent JavaScript backdoor across multiple ...

With its new browser-in-the-browser capability, the tool helps threat actors fool employees into giving up credentials.

Security researchers at Push Security are warning that Sneaky2FA, an advanced phishing-as-a-service (PhaaS) kit, has released ...

APT24 and Autumn Dragon launch multi-year espionage campaigns using BADAUDIO, supply chain attacks, and new CVE-2025-8088 ...

Sneaky2FA, a popular among cybercriminals phishing-as-a-service (PhaaS) kit, has added Browser-in-the-Browser (BitB) capabilities, giving "customers" the option to launch highly deceptive attacks.

A North Korea-linked hacking campaign hides advanced malware inside public JSON storage services during fake job tests.

Threat actors are weaponizing trusted software certificates to deliver stealthy malware and compromise enterprise networks through fraudulent, signed applications, ...

Amidst the glossy marketing for VPN services, it can be tempting to believe that the moment you flick on the VPN connection ...