Attackers Combine Coruna and DarkSword Into New DarkCoruna iOS Exploit Chain
Security researchers have observed attackers deploying the Coruna and DarkSword iOS exploit kits together from a single malicious website. The combined setup, called DarkCoruna, expands...
ICMacOS Malware Evolves From Mac Infostealer Into Persistent RAT With Remote Shell Access
ICMacOS, also known as Icarus macOS, has evolved from a Mac information stealer into a persistent remote access trojan that gives attackers interactive shell...
XWorm Malware Hijacks Logged-In Browser Sessions to Bypass MFA
XWorm malware is expanding beyond data theft, giving attackers control of logged-in browser sessions and access to microphones, webcams, and location data.
According to...
Kimsuky Hackers Use Fake Resume Files to Deploy Quasar RAT and Funhouse Ransomware
Researchers linked the campaign to earlier Kimsuky operations involving Endpoint ransomware. Similarities include reused script code, matching malware settings, and shared encryption features.
The...
Fake Web3 Accelerator Uses Malicious npm Packages to Target Crypto Founders
Security Labs uncovered a fake Web3 accelerator that used malicious npm packages to target cryptocurrency founders and startups.
The operation promoted free Claude and...