Malware

You might think your security stack has things covered. But some threats are built specifically to slip through it quietly, without raising a single flag.  They don’t explode on arrival. They wait for someone to open a file, scan a...

Microsoft has released RIFT (Rust Identification and Function Tagging), a groundbreaking open-source tool designed to help cybersecurity analysts identify and analyze malware concealed within Rust binaries.  Summary 1. RIFT - Microsoft's open-source tool to analyze Rust-based malware like BlackCat and Hive...

A recent incident response investigation from THE DFIR report has revealed the sophisticated tactics employed by RansomHub ransomware operators in a coordinated attack campaign that compromised an entire corporate network through an exposed Remote Desktop Protocol (RDP) server. The attack,...

Threat actors are allegedly offering the complete source code of a sophisticated Malware-as-a-Service (MaaS) botnet for sale.  This advanced malicious framework represents a significant escalation in cybercriminal capabilities, leveraging legitimate enterprise-grade technologies and blockchain integration to create a highly resilient...

A sophisticated scam operation dubbed "GhostVendors" that exploits over 4,000 fraudulent domains to impersonate dozens of major brands and defraud consumers through fake online marketplaces. Silent Push Threat Analysts revealed this massive campaign targets social networks, major brands, advertising companies,...

A sophisticated new malware attack vector that manipulates users through fake browser verification prompts designed to mimic legitimate CAPTCHA systems.  This attack leverages social engineering techniques combined with clipboard manipulation and obfuscated PowerShell commands to trick victims into voluntarily executing...

A sophisticated malware campaign that exploits legitimate SSH clients, including both the popular PuTTY application and Windows' built-in OpenSSH implementation, to establish persistent backdoors on compromised systems. The attack demonstrates how cybercriminals are increasingly leveraging trusted administrative tools to evade...

Cybercriminals have launched a sophisticated malware campaign using a fake Bitdefender antivirus website to distribute a dangerous trio of malicious programs designed to steal financial data and maintain persistent access to victims' computers. DomainTools Intelligence (DTI) has identified the...

A sophisticated new variant of the FormBook malware that grants cybercriminals complete remote control over Windows systems through an elaborate multi-stage attack process.  The latest analysis, published on May 27, 2025, reveals that this information-stealing malware has evolved significantly, incorporating...

Dutch intelligence services have identified a previously unknown Russian hacking group responsible for cyberattacks on multiple Dutch organizations, including a significant breach of the national police system in September 2024 that compromised work-related contact information of officers. The Netherlands General...