New Wave of AiTM Phishing Targets TikTok for Business
Threat IntelligenceInfosecurity Magazineil y a 15 heures
Push Security has uncovered a new AiTM phishing campaign targeting TikTok for Business accounts using Google and TikTok themed login pages
Flux RSS
— Sources secondairesIran-Linked Pay2Key Ransomware Group Re-Emerges
Malware & RansomwareInfosecurity Magazineavant-hier
Halcyon and Beazley Security track the return of Iranian ransomware group Pay2Key
TeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise
Malware & RansomwareInfosecurity Magazineil y a 3 jours
Python package LiteLLM compromised with credential-stealing malware linked to TeamPCP threat group
Silver Fox Cyber Campaigns Show Shift Toward Dual Espionage
Malware & RansomwareInfosecurity Magazineil y a 4 jours
Silver Fox pivots from ValleyRAT tax lures to WhatsApp‑style stealers, blending espionage & phishing
New Npm 'Ghost Campaign' Uses Fake Install Logs to Hide Malware
Malware & RansomwareInfosecurity Magazineil y a 4 jours
Ghost npm campaign fakes install logs to steal sudo passwords and drop RATs that loot crypto and data
Russian Initial Access Broker Handed 81-Month Sentence
Malware & RansomwareInfosecurity Magazineil y a 4 jours
Russian cybercriminal Aleksei Volkov has received close to seven years behind bars for role in Yanluowang ransomware
Tycoon2FA Phishing Service Resumes Activity Post-Takedown
Threat IntelligenceInfosecurity Magazineil y a 5 jours
Tycoon2FA phishing platform resumes activity post-takedown, leveraging AITM techniques to bypass MFA
Trivy Supply Chain Attack Expands With New Compromised Docker Images
Malware & RansomwareInfosecurity Magazineil y a 5 jours
New Trivy Docker images 0.69.5 and 0.69.6 compromised with TeamPCP infostealer, impacting CI/CD scans
Financial Brands Targeted in Global Mobile Banking Malware Surge
Malware & RansomwareInfosecurity Magazineil y a 9 jours
Mobile banking malware targets over 1200 financial apps globally, shifting fraud to user devices
Crypto Scam "ShieldGuard" Dismantled After Malware Discovery
Malware & RansomwareInfosecurity Magazineil y a 10 jours
ShieldGuard Chrome extension posed as a crypto security tool but stole wallets and drained user data
Researchers Warn of Global Surge in Fake Shipment Tracking Scams
Threat IntelligenceInfosecurity Magazineil y a 12 jours
Some of these campaigns are linked to Darcula, a Chinese-language phishing-as-a-service platform
FBI Calls for Help to Track Steam Malware Campaign
Malware & RansomwareInfosecurity Magazineil y a 12 jours
The FBI wants to hear from gamers who have downloaded Steam titles containing malware
PixRevolution Malware Hijacks Brazil's PIX Transfers in Real Time
Malware & RansomwareInfosecurity Magazineil y a 16 jours
PixRevolution Android trojan hijacks Brazil’s PIX payments in real time using accessibility abuse
Iran Claims Massive Cyber-Attack on MedTech Firm Stryker
Malware & RansomwareInfosecurity Magazineil y a 16 jours
The pro-Iran Handala group claims to have wiped 200,000 systems in destructive wiper malware attack on US firm Stryker
Compromised WordPress Sites Deliver ClickFix Attacks in Global Infostealer Campaign
Malware & RansomwareInfosecurity Magazineil y a 17 jours
Over 250 legitimate websites, including news outlets and a US Senate candidate’s official webpage, been compromised to infect visitors with infostealers, warn Rapid7 researchers
BlackSanta EDR-Killer Targets HR Teams in CV-Themed Campaign
Malware & RansomwareInfosecurity Magazineil y a 17 jours
BlackSanta malware targets HR staff with fake resumes, kills EDR and steals system data
Iran's MuddyWater Hackers Hit US Firms with New 'Dindoor' Backdoor
Malware & RansomwareInfosecurity Magazineil y a 22 jours
A bank, an airport, a non-profit and the Israeli branch of a US software company were among the targets of this new MuddyWater campaign
Zero‑Day Attacks on Enterprise Software Reach Record High, Google Warns
Threat IntelligenceInfosecurity Magazineil y a 22 jours
Almost a quarter of the zero days detected by Google in 2025 targeted security and networking appliances
Zero-Click FreeScout Bug Enables Remote Code Execution
Threat IntelligenceInfosecurity Magazineil y a 23 jours
Ox Security warns that Mail2Shell could enable threat actors to hijack FreeScout systems without user interaction
Multi-Stage "BadPaw" Malware Campaign Targets Ukraine
Malware & RansomwareInfosecurity Magazineil y a 24 jours
Malware campaign uses Ukrainian email service for credibility, deploying "BadPaw" to execute attacks