The phishing campaign shows how attackers continue to weaponize legitimate cloud services and open source tools to evade detection and gain trust.
The attack consists of a NexShield malicious browser extension, a social engineering technique to crash the browser, and a ...
Researchers uncovered a CrashFix campaign where a fake Chrome ad blocker crashes browsers to trick users into installing the ...
New WhatsApp Web attack spreads self-propagating ZIP files containing Astaroth banking malware through trusted conversations.
Tomiris APT targets government bodies with multi-language malware implants Group hides C2 traffic in Telegram/Discord, using phishing for initial access Campaign focuses on state-level intelligence, ...
A malvertising campaign is using a fake ad-blocking Chrome and Edge extension named NexShield that intentionally crashes the ...
Researchers with Cyata and BlueRock uncovered vulnerabilities in MCP servers from Anthropic and Microsoft, feeding ongoing security worries about MCP and other agentic AI tools and their dual natures ...
ClickFix variant CrashFix relies on a malicious Chrome extension to crash the browser and trick victims into installing the ...
Active malware exploits DLL side-loading in a signed GitKraken binary to deliver trojans, stealers, and remote access malware ...