New DOUBLECUP ClickFix service hides malware in browser cache images

A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by ...
Microsoft

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals ...

Online ad firm Adform’s script compromised to steal cryptocurrency

Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites ...
TechSpot

These fake download websites look real and rank high on Google, until they swap the links for malware

A hot potato: The developer behind popular Windows optimization tool Wintoys has uncovered a sophisticated cybercrime operation that mimics dozens of popular Windows apps through duplicate websites ...