New OkoBot framework deploys 20 payloads to steal data, crypto

A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency ...
Infosecurity Magazine

Phishing Campaign Hides Lua Loader as TrueType Font File

A large-scale phishing operation has been observed disguising a malicious script as a TrueType font file (.tff). Using the ...
The Hacker News

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

New TELEPUZ malware spreads through ClickFix, then steals browser cookies, logs keystrokes, runs commands, and installs ...

Now, even Russia’s most elite hackers are using Clickfix to infect devices

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...
Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...
SecurityWeek

Windows Bind Link Attacks Can Hide Malware From EDR Tools

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...
Dark Reading

Cursor IDE Auto-Executes Malicious Code in Poisoned Repos

Researchers reported the flaw to Cursor in December, but it still remains in the popular AI coding platform and can be used ...
The Hacker News

Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install

Malicious jscrambler 8.14.0 runs hidden binaries during npm install on Windows, macOS, and Linux, with no fix available as of ...
Windows Report

Extract MSI Files From EXE: 4 Ways to Do It With Ease

For fixing Windows errors, we recommend Fortect: Fortect will identify and deploy the correct fix for your Windows errors. Follow the 3 easy steps to get rid of Windows errors: The MSI file extension ...