The Gootloader malware, typically used for initial access, is now using a malformed ZIP archive designed to evade detection ...

Hackers are exploiting a side-loading flaw in a signed GitKraken executable to bypass defenses and deploy trojans, stealers, ...

Securonix has published a blog giving details of a new multi-stage Windows malware campaign it calls SHADOW#REACTOR. Its goal is to deploy the Remcos RAT ...

Active malware exploits DLL side-loading in a signed GitKraken binary to deliver trojans, stealers, and remote access malware ...

SHADOW#REACTOR malware uses scripts and Windows tools to deploy Remcos RAT quietly, bypass defenses, and gain lasting remote ...

The phishing campaign shows how attackers continue to weaponize legitimate cloud services and open source tools to evade ...

SHADOW#REACTOR is a malware campaign using VBS, PowerShell, and MSBuild to stealthily deploy Remcos RAT with persistent ...

Have we just stumbled upon the silliest cat pics collection out there? Well, I feel the page's 288k followers nodding their ...

The packer plays a key role in initial access operations. Rather than delivering a single malware family, pkr_mtsi has been ...

The Windows Blue Screen (or Black Screen) of Death is typically a sign that some unrecoverable error or conflict has occurred. Now, cybercriminals are using the dreaded BSOD as a way to trick people ...

Threat actors are using the social engineering technique to deploy the DCRat remote access Trojan against targets in the hospitality sector.

Multi-stage malware campaign targets hospitality organizations using social engineering and abuse of MSBuild.exe ...