Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.

PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless ...

A fileless malware framework has been abusing Google's Blogspot platform to deliver the PureLog Stealer entirely in memory, letting attackers steal credentials while leaving few traces on disk.

AWS has recently announced the AWS Workload Credentials Provider to automatically deliver and refresh certificates and ...

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.

SocGholish uses traffic distribution systems (TDSs) to provide initial access into victims' networks for cybercrime groups ...

Prinz Eugen ransomware targets recently modified files first and skips ransom notes, exposing backup, EDR, and incident ...