Weaponized Tax Invoices Unveil Dangerous WhiteSnake Stealer
A new cyberattack campaign is underway using tax invoice themed emails with a malicious attachment named Tax Invoice_21920047-2.bat, which utilizes a multi-stage approach to...
Konfety Hackers Infiltrate 250 Google Play Store Apps with Malicious Ads
Konfety leverages a non-malicious advertising SDK, CaramelAds, for its large-scale ad fraud scheme. The operation hinges on "evil twin" apps, distributed outside official stores,...
Weaponized AWS Packages Spreading Malware through Innocent-Looking JPEGs
Malicious actors published seemingly legitimate packages to the npm registry that contained malicious code hidden within image files. The code was executed during installation...
NullBulge Actor Leaks Disney’s Private Slack Chats – Tools Revealed
A new cybercriminal group, NullBulge, targets AI and gaming companies by injecting malicious code into public software repositories (GitHub, Hugging Face) and game mods,...
New ShadowRoot Ransomware Targets Businesses with Dangerous Weaponized PDFs
X-Labs research has identified a new ransomware targeting Turkish businesses, where the attack vector involves phishing emails with malicious PDF attachments from the internet.ru...
