Hackers Create Phishing Pages Inside Your Browser With No Malicious Website to Block
Instead of sending victims to a hosted credential-harvesting page, the attackers generate the phishing page directly inside the victim’s browser using a blob URL.
This...
Vidar Uses Victims’ Own Browsers to Extract Data Protected by Browser Encryption
Cybercriminals are abusing Grand Theft Auto 6 hype to distribute Vidar infostealer malware through fake Rockstar Games websites.
The sites promote a non-existent GTA...
New Abyssos RAT Hijacks Browser Sessions, Steals Credentials and Gives Attackers Remote VNC Access
Abyssos operates as a post-exploitation framework. Once attackers gain access to a device, they can use the RAT to explore files, collect credentials, monitor...
Hackers Abuse Service Workers to Assemble Malware Inside Web Browsers
Hackers are abusing modern browser features like ServiceWorkers and SharedWorkers to assemble malware entirely inside the victim’s browser memory.
The SourTrade malvertising operation is...
Chrome Extensions Hijack Default Search Engines to Monetize 758,000 Users’ Queries
A massive operation dubbed the SearchJack campaign has been uncovered, revealing twenty-three deceptive Chrome browser extensions that silently override users' default search engines.
According...