Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Malicious npm packages evade install-script defenses at runtime
An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicious code in a package's normal runtime behavior rather than in installation scripts.
Brevo Supply-Chain Attack Infected Over 100,000 Websites
A Brevo supply-chain attack used compromised Cloudflare access to inject malware into websites, potentially affecting over 100,000 sites. Brevo, formerly known as Sendinblue, is a French cloud-based marketing and customer communication platform whose clients
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks targeting government and defense entities in India and Afghanistan. The attacks, per Zscaler ThreatLabz, involve the use of previously undocumented tool
RatHat Android Malware Uses AI To Hijack Phones, Steal Banking Credentials
Security researchers at Zimperium’s zLabs are sounding the alarm over a new breed of malware dubbed RatHat, which malicious actors are using to compromise Android devices. While RatHat makes use of tried-and-true approaches at various stages of an attack, the
China's Salt Typhoon spotted probing Latin American government with newly developed SparroWocky backdoor
ESET reports Salt Typhoon shifted focus to Latin America, hitting Argentina, Peru, Venezuela, and othersGroup deployed new SparroWocky backdoor with 30+ commands for profiling, exfil
New Android malware uses AI to steal bank logins and PINs
Researchers at Zimperium’s zLabs have analyzed an Android Trojan that uses an automated, multi-stage infection process. Whats new is that RatHat gives a live AI assistant the keys to the accessibili
Fake calendar invites can infect your system, and they’re surging – how to protect yourself
Lance Whitney/ZDNET Fake meeting invites can infect your system with malware.Many email programs may automatically add invites to your calendar.Dont respond to the email or
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
A financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based information stealer known as PhantomRaven via the npm package registry. "The developer likely wrote the malware using a large language model (LLM), an assessment made with high confid
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel.
Blockchain malware activity jumps 440% as AI lowers the barrier for North Korea and Iran-linked hackers
Public chains preserve malware instructions beyond ordinary domain takedowns, shifting defense toward monitoring wallets, contracts and off-chain servers.
RatHat Turns Android Accessibility Into an Attack Weapon
RatHat combines AI-driven screen control, Android debugging abuse and advanced credential theft to give attackers deep control of infected phones. RatHat is the new Android trojan you should know about. Zimperium researchers just published a breakdown of a st
Brevo Supply Chain Attack Injects Malware Into 100,000 Websites
Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts.