Researchers linked the campaign to earlier Kimsuky operations involving Endpoint ransomware. Similarities include reused ...
Seven internet domains that carried a vulnerability scanner and a spear-phishing kit were redirected to FBI-controlled name ...
IntroductionIn July 2026, Zscaler ThreatLabz uncovered a campaign linked to TraderTraitor (also tracked as Jade Sleet, UNC4899, Pressure Chollima, and Slow Pisces), an advanced persistent threat actor ...
CastleStealer upgrades target Windows users, bypassing browser encryption, executing remote commands and stealing sensitive ...
ClickFix Fake CAPTCHA Attack Tricks Users A new ClickFix fake CAPTCHA attack is turning routine web safety checks into a route for malware. Visitors to compromised websites are shown fake CAPTCHA or ...
Integrity Technology Group hacking exposed: seven nations named the sanctioned Beijing cybersecurity firm that built a custom ...
The FBI has warned that Chinese government-linked hackers are combining automated vulnerability scanning, large-scale botnets ...
ICMacOS targets macOS with ClickFix, steals credentials, crypto wallets, and developer secrets, then enables persistent RAT ...
ClickFix attacks now hide payloads using DNS TXT records and browser cache pre-fetching, making it tougher to spot early ...
Hackers exploit critical Citrix NetScaler flaw CVE-2026-88771 to run commands, install web shells and steal configuration ...
The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, ...
U.S. authorities seized seven domains used by China-linked Flax Typhoon to scan networks and support intrusions into critical ...