The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.

A malicious Microsoft Edge extension dubbed ‘Edgecution' has been used in a ransomware attack to escape the browser sandbox and deploy a Python-based backdoor. Access to the local system is obtained ...

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

Kerala Police warn businesses of a WhatsApp scam where fraudsters use hacked accounts, sending malicious files disguised as ...

CERT-In has issued a warning about a significant malware campaign targeting WhatsApp Web and Desktop users. Cybercriminals ...

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless ...

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.

Anyone receiving a file via WhatsApp from a seemingly familiar contact should be particularly cautious at the moment.

Turns out Windows already gives you all the tools you need to block distracting apps and websites—you just have to put them ...

A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from ...

The difference between a virus and a worm is not semantic. A virus waits for a user to trigger it; a worm exploits ...