Iran-Linked Pay2Key Ransomware Group Re-Emerges
Malware & RansomwareInfosecurity Magazineavant-hier
Halcyon and Beazley Security track the return of Iranian ransomware group Pay2Key
Flux RSS
— Sources secondairesTeamPCP Expands Supply Chain Campaign With LiteLLM PyPI Compromise
Malware & RansomwareInfosecurity Magazineil y a 3 jours
Python package LiteLLM compromised with credential-stealing malware linked to TeamPCP threat group
Silver Fox Cyber Campaigns Show Shift Toward Dual Espionage
Malware & RansomwareInfosecurity Magazineil y a 4 jours
Silver Fox pivots from ValleyRAT tax lures to WhatsApp‑style stealers, blending espionage & phishing
New Npm 'Ghost Campaign' Uses Fake Install Logs to Hide Malware
Malware & RansomwareInfosecurity Magazineil y a 4 jours
Ghost npm campaign fakes install logs to steal sudo passwords and drop RATs that loot crypto and data
Russian Initial Access Broker Handed 81-Month Sentence
Malware & RansomwareInfosecurity Magazineil y a 4 jours
Russian cybercriminal Aleksei Volkov has received close to seven years behind bars for role in Yanluowang ransomware
Trivy Supply Chain Attack Expands With New Compromised Docker Images
Malware & RansomwareInfosecurity Magazineil y a 5 jours
New Trivy Docker images 0.69.5 and 0.69.6 compromised with TeamPCP infostealer, impacting CI/CD scans
LeakNet ransomware: what you need to know
Malware & RansomwareGraham Cluleyil y a 8 jours
A ransomware gang that claims to be a group of "investigative journalists"? Meet LeakNet - the group using fake CAPTCHA pages to trick employees into hacking themselves. Read more in my article on the Fortra blog.
Financial Brands Targeted in Global Mobile Banking Malware Surge
Malware & RansomwareInfosecurity Magazineil y a 9 jours
Mobile banking malware targets over 1200 financial apps globally, shifting fraud to user devices
Crypto Scam "ShieldGuard" Dismantled After Malware Discovery
Malware & RansomwareInfosecurity Magazineil y a 10 jours
ShieldGuard Chrome extension posed as a crypto security tool but stole wallets and drained user data
FBI Calls for Help to Track Steam Malware Campaign
Malware & RansomwareInfosecurity Magazineil y a 12 jours
The FBI wants to hear from gamers who have downloaded Steam titles containing malware
PixRevolution Malware Hijacks Brazil's PIX Transfers in Real Time
Malware & RansomwareInfosecurity Magazineil y a 16 jours
PixRevolution Android trojan hijacks Brazil’s PIX payments in real time using accessibility abuse
Iran Claims Massive Cyber-Attack on MedTech Firm Stryker
Malware & RansomwareInfosecurity Magazineil y a 16 jours
The pro-Iran Handala group claims to have wiped 200,000 systems in destructive wiper malware attack on US firm Stryker
Smashing Security podcast #458: How not to steal $46 million from the US government
Malware & RansomwareGraham Cluleyil y a 16 jours
A Wikipedia security engineer accidentally wakes a dormant JavaScript worm that hadn't stirred since 2024 - and within minutes, giant woodpecker images are plastered across the internet's favourite encyclopaedia. Meanwhile, a crypto contractor hired to help the US Marshals manage seized digital assets allegedly decides to help himself to $46 million of it - and then brags about it on a recorded Telegram call. Plus: Graham champions Asterix, Trisha discovers the fantasy novels of Robin Hobb, and someone called "Lick" ends up in the nick. All this, and much more, in episode 458 of the "Smashing Security" podcast with cybersecurity veteran Graham Cluley, and special guest Tricia Howard.
Compromised WordPress Sites Deliver ClickFix Attacks in Global Infostealer Campaign
Malware & RansomwareInfosecurity Magazineil y a 17 jours
Over 250 legitimate websites, including news outlets and a US Senate candidate’s official webpage, been compromised to infect visitors with infostealers, warn Rapid7 researchers
BlackSanta EDR-Killer Targets HR Teams in CV-Themed Campaign
Malware & RansomwareInfosecurity Magazineil y a 17 jours
BlackSanta malware targets HR staff with fake resumes, kills EDR and steals system data
Iran's MuddyWater Hackers Hit US Firms with New 'Dindoor' Backdoor
Malware & RansomwareInfosecurity Magazineil y a 22 jours
A bank, an airport, a non-profit and the Israeli branch of a US software company were among the targets of this new MuddyWater campaign
Multi-Stage "BadPaw" Malware Campaign Targets Ukraine
Malware & RansomwareInfosecurity Magazineil y a 24 jours
Malware campaign uses Ukrainian email service for credibility, deploying "BadPaw" to execute attacks
Ransomware Payments Decline 8% as Attacks Surge 50%
Malware & RansomwareInfosecurity Magazineil y a 26 jours
Chainalysis reveals a big surge in median ransomware payment size in 2025 despite overall drop in criminal revenue
Notorious ransomware gang allegedly blackmailed by fake FSB officer
Malware & RansomwareGraham Cluleyil y a 30 jours
There is a certain poetic justice in a cybersecurity-related story that has emerged from Moscow this week: A man has been accused of trying to extort money... from a notorious Russian ransomware gang. Read more in my article on the Hot for Security blog.
Google Disrupts ‘Prolific’ and ‘Elusive’ China-Linked Global Hacking Campaign
Malware & RansomwareInfosecurity Magazineil y a 30 jours
UNC2814 hit 53 victims in 42 countries with novel backdoor in decade long cyber espionage operation