ClickFix Attack Uses Compromised Websites and Polygon Blockchain to Deploy Banking Malware
A sophisticated ClickFix campaign has compromised at least 31 legitimate business websites to deliver a PowerShell backdoor that uses the Polygon blockchain to locate...
ClickFix Campaign Abuses Google Sheets C2 to Inject Malicious JavaScript Into Chrome
Cisco Talos has uncovered a cryptocurrency theft campaign that abuses Google Sheets and the Google Visualization API as a command-and-control (C2) channel.
The attackers...
Hackers Hijack 3,562 Redis Servers via Rogue Replication to Deploy XMRig Miner
Threat actors compromised 3,562 internet-exposed Redis servers in a large cryptomining campaign that abused Redis replication features to install XMRig.
The attackers targeted unauthenticated...
Malicious Exodus Installer Steals Browser Credentials and Turns PCs Into SOCKS Proxies
A malicious installer disguised as the Exodus cryptocurrency wallet is being used to deploy a modular remote-access trojan (RAT) that steals browser data, enables...
Hackers Turn Ethereum Blockchain Into a Card-Skimming Network Targeting Online Shoppers
Cybercriminals are abusing Ethereum blockchain technology to steal payment-card details from online shoppers. The campaign, tracked as HexMage, compromises legitimate e-commerce websites and injects...