The Russian-linked threat actor APT28, also known as Sofacy, Fancy Bear, Forest Blizzard, and TAG-110, has unveiled...
malware
First emerging in 2011, SmokeLoader (also known as Smoke or Dofoil) has remained one of the most...
A recent forensic investigation by Check Point Research (CPR) has shed light on the Pure malware family,...
The Socket Research Team has uncovered a large-scale supply chain attack on the npm ecosystem, with more...
CyberProof’s MDR analysts and Threat Hunters observed a sharp increase in DarkCloud Stealer infections, with campaigns primarily...
The Cyble Research and Intelligence Labs (CRIL) has uncovered an active campaign distributing a new information-stealing malware...
Researchers at FortiGuard Labs have uncovered a sophisticated SEO poisoning campaign aimed at Chinese-speaking users. By manipulating...
Expel researchers have lifted the veil on a long-running malware operation abusing the global trust model of...
IBM X-Force has published new findings on Hive0154, a China-aligned threat actor also tracked under names such...
Trend Micro researchers have uncovered a sophisticated malware campaign dubbed EvilAI, which disguises itself as productivity and...
The Sysdig Threat Research Team (TRT) has discovered a new cross-platform Remote Access Trojan (RAT) dubbed ZynorRAT,...
Bitdefender Threat researchers have detailed a new and highly sophisticated fileless malware framework named EggStreme, used by...
Intezer researchers have released a technical analysis of a new variant of ToneShell, a lightweight backdoor tied...
Zscaler ThreatLabz has identified a sophisticated malware campaign active since early May 2025, targeting Chinese-speaking users with...
Researchers at Palo Alto Networks’ Unit 42 have published a report detailing the rise of AdaptixC2, an...
Jamf Threat Labs has uncovered a new variant of the ChillyHell malware family—an advanced, modular backdoor for...
Cybereason Security Services has uncovered a malicious Chrome extension campaign targeting Meta (Facebook and Instagram) advertisers. Branded...
Cyble Research and Intelligence Labs (CRIL) has discovered an active in-the-wild Linux botnet campaign dubbed “Luno,” which...
Kroll has identified a new espionage campaign attributed to Russia’s APT28 (Fancy Bear), involving a custom Outlook...
Zscaler ThreatLabz has uncovered new details about North Korean-aligned threat actor APT37 (also known as ScarCruft, Ruby...