Critical Alert

CVE-2026-50751 - Critical Check Point VPN Exploit Discovered Active in the Wild. View Threat Details →

Powered by CVE WATCHTOWER

×

social engineering

The “Fix” is a Trap: ConsentFix Phishing Bypasses MFA via Azure CLI ConsentFix Phishing OAuth Token Theft

ConsentFix Phishing OAuth Token Theft

The “Fix” is a Trap: ConsentFix Phishing Bypasses MFA via Azure CLI

Do Son February 2, 2026

A cunning new phishing technique is turning the trust of Microsoft’s own tools against its users. Dubbed...

AI-Coded Malware: Vietnamese “Huna” Actor Targets Job Seekers with PureRAT AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

AI-Coded Malware: Vietnamese “Huna” Actor Targets Job Seekers with PureRAT

Do Son February 2, 2026

A new wave of cyberattacks has been detected targeting job seekers worldwide, driven by a Vietnamese threat...

The “Fake CAPTCHA” Trap: Malware Hides in Google Calendar & Images CloudComputating - QSC framework

CloudComputating - QSC framework

The “Fake CAPTCHA” Trap: Malware Hides in Google Calendar & Images

Do Son January 29, 2026

It starts with a simple, annoying verification box: “I am not a robot.” But a new campaign...

“Repo Squatting”: How Hackers Are Using GitHub’s Own Features to Hijack Official Repos GitHub Copilot Pro trial suspension GitHub Actions Platform Fee, Self-Hosted Runner Tax 2026 GitHub Apple ID, Privacy Login GitHub Microsoft Github disruptions CVE-2025-30066 GitHub Outage, Service Disruption

GitHub Copilot Pro trial suspension GitHub Actions Platform Fee, Self-Hosted Runner Tax 2026 GitHub Apple ID, Privacy Login GitHub Microsoft Github disruptions CVE-2025-30066 GitHub Outage, Service Disruption

“Repo Squatting”: How Hackers Are Using GitHub’s Own Features to Hijack Official Repos

Do Son January 27, 2026

In a clever twist on software supply chain attacks, threat actors are weaponizing a quirk in GitHub’s...

The CAPTCHA Trap: ClearFake Malware Tricks Users Into Hacking Themselves axios Supply Chain Attack WAVESHAPER.V2 SnappyBee Malware Salt Typhoon Stately Taurus ScoringMathTea RAT, Lazarus Reflective DLL

axios Supply Chain Attack WAVESHAPER.V2 SnappyBee Malware Salt Typhoon Stately Taurus ScoringMathTea RAT, Lazarus Reflective DLL

The CAPTCHA Trap: ClearFake Malware Tricks Users Into Hacking Themselves

Do Son January 27, 2026

A sophisticated malware campaign is turning a standard security verification step into a trap. Security researchers at...

India Tax Scam Alert: “SyncFuture” Campaign Installs Chinese Surveillance Tool SyncFuture Espionage India Tax Phishing

SyncFuture Espionage India Tax Phishing

India Tax Scam Alert: “SyncFuture” Campaign Installs Chinese Surveillance Tool

Do Son January 26, 2026

A new and sophisticated cyber threat emerged targeting residents of India, disguising a potent espionage operation as...

Code by AI: KONNI APT Targets Crypto Devs with “Polished” Backdoor NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

Code by AI: KONNI APT Targets Crypto Devs with “Polished” Backdoor

Do Son January 26, 2026

The KONNI APT group, a threat actor historically aligned with North Korean interests, has launched a sophisticated...

How New Phishing Kits Are Turning Vishing into Real-Time Orchestration

Vishing Kits MFA Bypass

How New Phishing Kits Are Turning Vishing into Real-Time Orchestration

Do Son January 25, 2026

A new generation of cyber threats has emerged, transforming the clunky art of voice phishing (vishing) into...

Mac Users Beware: “MacSync” Malware Tricks You Into Hacking Yourself MacSync Malware macOS ClickFix

MacSync Malware macOS ClickFix

Mac Users Beware: “MacSync” Malware Tricks You Into Hacking Yourself

Do Son January 23, 2026

A sophisticated new malware campaign is targeting macOS users with a lethal combination of social engineering and...

Crossing the Andes: Sophisticated Loan Phishing Scams Hit Peru Peru Loan Phishing Luhn Algorithm Scam

Peru Loan Phishing Luhn Algorithm Scam

Crossing the Andes: Sophisticated Loan Phishing Scams Hit Peru

Do Son January 23, 2026

A sophisticated wave of digital fraud is sweeping through Peru, targeting vulnerable individuals with the promise of...

GitHub & Dropbox Weaponized: “Defendnot” Tool Used to Disable Windows Defender Defendnot Abuse Multi-Stage Malware Campaign

Defendnot Abuse Multi-Stage Malware Campaign

GitHub & Dropbox Weaponized: “Defendnot” Tool Used to Disable Windows Defender

Do Son January 22, 2026

A sophisticated multi-stage malware campaign has been uncovered targeting users in Russia, blending social engineering with a...

Fake Windows Executables Target macOS: Inside the “MonetaStealer” Discovery MonetaStealer macOS Malware

MonetaStealer macOS Malware

Fake Windows Executables Target macOS: Inside the “MonetaStealer” Discovery

Do Son January 20, 2026

A bizarre new threat has emerged on the macOS landscape, one that relies on a classic misconception...

Fake Malwarebytes Campaign Exploits DLL Sideloading to Drop Infostealers GuLoader Malware CloudEye Obfuscation npm, malware Ethereum, npm supply chain OAST techniques StilachiRAT macOS Malware PasivRobber

GuLoader Malware CloudEye Obfuscation npm, malware Ethereum, npm supply chain OAST techniques StilachiRAT macOS Malware PasivRobber

Fake Malwarebytes Campaign Exploits DLL Sideloading to Drop Infostealers

Do Son January 19, 2026

A new and sophisticated malware campaign masquerading as legitimate software installers has been uncovered. In a recent...

The Fake “RedLine”: Imposter Malware Hijacks Crypto Wallets on Discord RedLineCyber Clipboard Hijacker TangleCrypt Packer, STONESTOP EDR Killer Gamaredon APT - BoneSpy and PlainGnome

RedLineCyber Clipboard Hijacker TangleCrypt Packer, STONESTOP EDR Killer Gamaredon APT - BoneSpy and PlainGnome

The Fake “RedLine”: Imposter Malware Hijacks Crypto Wallets on Discord

Do Son January 19, 2026

A sophisticated new cybercrime operation is preying on the trust of the cryptocurrency community by masquerading as...

“Browser-in-the-Browser” Attack Escalates: Trellix Reports Surge in Sophisticated Facebook Phishing phishing-3390518_1280

phishing-3390518_1280

“Browser-in-the-Browser” Attack Escalates: Trellix Reports Surge in Sophisticated Facebook Phishing

Do Son January 15, 2026

The era of easily spotting phishing emails by checking the URL bar may be coming to an...

“Boto Cor-de-Rosa”: Banking Malware Astaroth Pivots to WhatsApp in New Campaign NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

“Boto Cor-de-Rosa”: Banking Malware Astaroth Pivots to WhatsApp in New Campaign

Do Son January 12, 2026

The notorious Brazilian banking malware Astaroth has evolved again, this time turning one of the world’s most...

Guloader Malware Rides Wave of Fake Performance Reports Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft

Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft

Guloader Malware Rides Wave of Fake Performance Reports

Do Son January 9, 2026

Cybercriminals are weaponizing workplace anxiety in a new sophisticated phishing campaign. The AhnLab Security Intelligence Center (ASEC)...

Microsoft Warns of Surge in Internal Domain Spoofing Internal Phishing Attacks Tycoon2FA

Internal Phishing Attacks Tycoon2FA

Microsoft Warns of Surge in Internal Domain Spoofing

Do Son January 7, 2026

A wave of sophisticated phishing attacks is hitting organizations by exploiting a classic weakness: the trust users...

The ClickFix Trap: PHALT#BLYX Targets Hotels with Fake Blue Screens and DCRat PHALT#BLYX hospitality campaign, ClickFix BSOD malware

PHALT#BLYX hospitality campaign, ClickFix BSOD malware

The ClickFix Trap: PHALT#BLYX Targets Hotels with Fake Blue Screens and DCRat

Do Son January 7, 2026

A sophisticated new cyber-espionage campaign is targeting the hospitality industry, turning everyday booking management into a nightmare...

The Mole in the Machine: New Arrests in Coinbase’s $400M Insider Data Scandal Romanian hacker sentenced identity theft conviction Pig-Butchering Crackdown Operation Level Up Oleksandr Didenko North Korean IT Workers Coinbase TaskUs insider breach, Hyderabad police Coinbase arrest Scattered Spider, Cybercrime Scattered Spider group

Romanian hacker sentenced identity theft conviction Pig-Butchering Crackdown Operation Level Up Oleksandr Didenko North Korean IT Workers Coinbase TaskUs insider breach, Hyderabad police Coinbase arrest Scattered Spider, Cybercrime Scattered Spider group

The Mole in the Machine: New Arrests in Coinbase’s $400M Insider Data Scandal

Do Son December 31, 2025

The U.S.-listed cryptocurrency exchange Coinbase recently announced that Indian police have once again arrested a former employee...