GitHub malware campaign spreads Rapuncel infostealer via fake LastPass Authenticator repos
A coordinated GitHub malware campaign uses fake LastPass Authenticator repositories to deliver a Microsoft-signed kernel driver and the new Rapuncel.
7 reports filed under this subject.
A coordinated GitHub malware campaign uses fake LastPass Authenticator repositories to deliver a Microsoft-signed kernel driver and the new Rapuncel.
The Brevo supply-chain attack leveraged a compromised Cloudflare API key to inject ClickFix scripts into thousands of WordPress sites.
BambooToken MQTT malware leverages the lightweight MQTT protocol to hide command-and-control traffic on Windows and Linux hosts.
Attackers exploit AI platform share links to deliver malware, forcing enterprises to tighten controls and monitor AI-generated content.
New Mantax Otax malware blends ransomware, spyware and harassment, proving Android's older versions remain fertile ground for attackers.
A blockchain malware campaign uses more than 5,400 compromised WordPress and PrestaShop sites to deliver ClickFix lures via BNB Smart Chain testnet contracts.
Microsoft’s security team identified a new ClickFix-derived malware family named TerminalFix . Each image hides fragments of additional executables.