DPRK-linked actors use GitHub C2 and LNK phishing in South Korea, enabling persistent PowerShell control and data ...
The Computer Emergencies Response Team of Ukraine (CERT-UA) has disclosed details of a new campaign that has targeted ...
A new malware family named 'AgingFly' has been identified in attacks against local governments and hospitals that steal ...
The multi-stage campaign targeting South Korea uses weaponized Windows shortcuts and GitHub-based command and control to ...
Microsoft has deprecated and removed the Support and Recovery Assistant (SaRA) command-line utility from all in-support ...
The financially motivated cybercriminal threat actor Storm-1175 operates high-velocity ransomware campaigns that weaponize ...
What looked like a nuisance adware issue inside managed IT environments has emerged as a broader cyber-security warning, after Huntress said software signed by Dragon Boss Solutions LLC exposed more ...
Attackers are exploiting trust in Adobe’s brand to deliver covert remote access, using a fake Acrobat Reader download page to install ConnectWise ScreenConnect through a fileless, memory-heavy attack ...
PowerShell's scripting language and ability to interact directly with Windows system elements give it a superpower that ...
CERT-UA links the AgingFly credential-stealing campaign to phishing, browser theft, and modular remote access.