SMOKE#SCREEN uses fake Adobe and Zoom updates, document lures, and trusted cloud services to install ScreenConnect for persistent remote access.

Steam gamers are being targeted by fake troubleshooting fixes that secretly install XMRig crypto miners through PowerShell ...

WSL gives Windows users an entire Linux system at the command line, with less overhead than a VM. The lion’s share of the ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices belonging to sensitive organizations in Ukraine, the latter country’s CERT ...

A phishing campaign is exploiting fears surrounding the recently disclosed COLDCARD wallet vulnerability and suspected $88.6 ...

One config file, and Sandbox stops being a one-trick pony.

CAPTCHAs were designed to separate humans from bots. Now scammers are using them to persuade humans to install malware.The FTC is warning about fake verification pages that instruct users to run ...

JavaScript engineering teams have a shrinking window to prepare: npm v12, the package manager's most significant security redesign in its 16-year history, is expected to reach final release before the ...

Attackers rarely stop after gaining initial access. Huntress analyzes a real-world intrusion to show how threat actors ...

Microsoft confirms Windows 11 PCs without the Secure Boot 2023 certificates will keep booting normally and getting them in ...

DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the ...

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals ...