malware
-
Supply Chain Alert: 140 Mastra npm Packages Compromised via Typosquatted Dependency
A sophisticated software supply chain attack has recently targeted the JavaScript ecosystem, compromising over 140 npm packages within the popular…
Read More » -
Rokarolla: zLabs Uncovers Sophisticated Android Banking Trojan
Cybersecurity researchers have uncovered a highly capable Android banking trojan dubbed Rokarolla—a name derived directly from its Command-and-Control (C2) infrastructure.…
Read More » -
Evolution of SprySOCKS: Analyzing the New Windows-Based Backdoor Variants
For much of its operational lifespan, the SprySOCKS backdoor has been a staple of the Linux environment, utilized extensively by…
Read More » -
Stealth via Infrastructure: How DragonForce Leverages Microsoft Teams TURN Relays for C2
In a sophisticated display of living-off-the-trusted-infrastructure, the DragonForce ransomware group has successfully weaponized Microsoft Teams’ backend architecture to mask malicious…
Read More » -
Active Exploitation Detected: Critical Vulnerabilities Targeting Fortinet FortiSandbox Infrastructure
The cybersecurity landscape has seen a rapid escalation in activity as threat actors pivot toward targeting core security infrastructure. Recent…
Read More » -
Supply Chain Attack on WordPress Ecosystem: How a CDN Compromise Exposed 1.2 Million Sites
A sophisticated supply chain attack has struck the WordPress ecosystem, targeting the widely used OptinMonster plugin and exposing over 1.2…
Read More » -
Anatomy of a Security Oversight: Administrative Exposure of a PHP Malware Distribution Backend
A recent discovery has highlighted a profound breakdown in operational security (OpSec) within a live threat actor’s infrastructure. A security…
Read More » -
APT37 Unmasked: The Highly Targeted NarwhalRAT Campaign
The threat actor identified as APT37 is currently deploying a highly sophisticated, multi-stage intrusion chain centered around NarwhalRAT. This campaign…
Read More » -
Supply Chain Warfare: Advanced Typosquatting Targets Web3 Development Ecosystems
Threat actors are increasingly weaponizing the inherent trust placed in open-source dependencies to target Web3 engineering teams. By deploying sophisticated…
Read More » -
Analyzing GoFlateLoader: The High-Volume Payload Delivery Mechanism for Modern Infostealers
In the evolving landscape of malware distribution, GoFlateLoader has emerged as a prominent Golang-based delivery vehicle. While its architecture may…
Read More » -
Technical Analysis: BLUERABBIT – A Modular Golang Backdoor with Destructive Payload Capabilities
Security researchers have identified a sophisticated new Golang-based backdoor, dubbed BLUERABBIT, designed to execute a multi-stage attack lifecycle on Windows…
Read More » -
Adversarial Exploitation of Claude Fable 5: Unpacking the Mechanics of LLM Jailbreaking
Anthropic’s latest high-parameter release, Claude Fable 5, has recently come under intense scrutiny following reports that researchers have successfully bypassed…
Read More » -
Zero-Day Alert: How CVE-2026-45586 Exploits CTFMON for Full System Administrative Control
Microsoft has officially disclosed a significant zero-day vulnerability residing within the Windows Collaborative Translation Framework (CTFMON), a critical component of…
Read More » -
Advanced Cryptojacking Campaign: Leveraging SEO Poisoning and AI Chatbots to Target High-Performance GPUs
Cybersecurity researchers have identified a sophisticated cryptojacking operation that marks an evolution in delivery methods. While traditional search engine poisoning…
Read More » -
Critical OS Command Injection Vulnerability Discovered in Fortinet FortiSandbox
Fortinet has issued a high-priority security advisory regarding a critical vulnerability within its FortiSandbox ecosystem. This flaw presents a significant…
Read More »