npm Supply Chain Worm Returns After Four-Month Dormancy With Same Malicious Payload
A previously documented Shai-Hulud npm supply-chain worm payload has reportedly reappeared after 111 days of inactivity, using the exact same malicious file linked to...
North Korea-Linked Hackers Turn Web Servers Into Stealthy Espionage Backdoors
The campaign targeted organizations in South Korea’s automotive and media sectors, using compromised edge servers to steal credentials, monitor victims, inject malicious content into...
Fake Minecraft Mod Steals Passwords and Gives Hackers Remote Control of PCs
Cybersecurity researchers have uncovered a fake Minecraft optimisation mod that steals browser passwords, payment-card data, cookies, Discord information, and system details while giving attackers...
Malicious Chrome Extension Turns the Browser Into a Backdoor for Hackers
Once installed, it can turn Google Chrome or Microsoft Edge into a persistent backdoor for stealing browser data, hijacking sessions, and executing commands on...
DPRK-Linked Hackers Use Trojanized macOS Installers to Deploy OtterCookie RAT
DPRK-linked threat actors are using fake macOS installers to deliver the OtterCookie remote access trojan (RAT) in an expansion of the long-running Contagious Interview...