Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Hack at Marketing Vendor Exploited To Widely Spread ClickFix Malware Attack
A hack at Brevo, an online marketing vendor, created a pathway to place a ClickFix-style attack across numerous websites on Monday to try and trick users into installing malware. A breach at an online marketing provider paved the way for a hacker to tamper wi
Cars Have Joined The Android Malware Economy
The first malware designed specifically for Android-powered vehicle systems signals that attackers now view cars as another endpoint in the broader technology ecosystem. Security leaders should assess how connected vehicles, mobile devices, and enterprise sys
Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords
The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HEAVYGRAM and a Delphi-based utility known as CRUDEEXCLUDE. "HEAVYGRAM offers builtin commands supporting remote command execution, system, network and process information
China's FamousSparrow APT Spies on US Politics in Latin America
Amid the US and China's fight for eco-colonial influence in Latin America, a stealthy backdoor has taken flight.
New RatHat Android malware uses AI to automate device control
A new Android malware called RatHat has been discovered, targeting users with an AI-powered subsystem that helps operators remotely navigate compromised devices.
China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America
The China-aligned state-sponsored threat actor known as FamousSparrow has been observed deploying a previously unreported backdoor called SparroWocky in attacks targeting multiple countries in Latin America since at least August 2025. "SparroWocky is a modular, C++ backdoor," ESET security research
LausivLoader analysis, or how to pass data between malware stages, (Thu, Sep 17th)
At the end of August, a malspam message was caught in the quarantine of a mail gateway operated by one of my customers. The message was not especially remarkable â it asked the recipient to review some attached requirements and provide a price quotation for
Brevo supply-chain attack injected ClickFix scripts on customer sites
Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware.
New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data
Security researchers at Zimperium have discovered a new Android malware strain targeting credential and bank detail harvesting. The malware, named RatHat by the researchers, is linked to threat acto
Fake AI trading agent steals crypto wallet passwords
Attackers built a website for a fake AI crypto trading agent and used it to install Needle Stealer, malware that replaces a victim’s browser wallet with a copy that sends the wallet password to the attacker. HP caught the campaign between April and June 2026.
Chosen Brick, Iran’s Surveillance Malware
UK, US, and Dutch agencies expose Chosen Brick, Iranian malware used to track and harass dissidents, journalists, and activists via Telegram. The UK, the US, and the Netherlands published a joint advisory warning about a Windows malware family, dubbed Chosen
How to Audit Microsoft Defender Exclusions in Windows 11 (Find and Remove Malware Hiding Spots)
Learn how to find, evaluate, and remove suspicious Microsoft Defender exclusions on Windows 11 using Settings, PowerShell, and Event Viewer to close a common malware loophole.