New Mac Malware Secretly Clones Your Browser and Uses Your Live Logins
A newly reported macOS malware implant called GhostProfile reportedly clones browser profiles and lets attackers operate a hidden browser using the victim’s existing login...
Blinder Tunnel Uses AppDomainManager Hijacking and DLL Sideloading to Evade Security
Iranian state-aligned attackers used AppDomainManager hijacking and DLL sideloading in a targeted campaign called Blinder Tunnel, designed to compromise critical infrastructure targets in Iraq....
CastleStealer Adds Remote Shell to Execute Commands and Deliver Additional Malware
CastleStealer has added remote shell capabilities that allow attackers to execute commands and deliver additional malware on infected systems.
First discovered in April 2026,...
Hackers Abuse Terraform Provider to Steal Developer Credentials and Deploy Backdoors
ThreatLabz discovered a malicious Terraform provider in July 2026 that delivers credential stealers and backdoors to developer systems.
The campaign uses trusted infrastructure workflows...
Warden Stealer Targets 200+ Crypto Wallet Extensions and 360+ Applications
Warden Stealer is expanding its reach across Windows systems, targeting cryptocurrency wallets, browser credentials, and sensitive application data.
Written in Rust, the malware is...