Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Chinese hackers use SparroWocky malware in govt espionage attacks
The China-linked espionage group FamousSparrow has been using a new backdoor named SparroWocky in attacks on government organizations in Latin America.
US Cyber Agency: To Foil Hackers, Don't Be Afraid To Use Decoys and Deception
CISA has published an advisory encouraging businesses and infrastructure providers to use deceptive decoys and bait within their own networks to help them detect and stop hackers. Hackers have long used trickery to bait users into installing malware or giving
Iran snoops on enemies of the state with Chosen Brick malware controlled using messaging apps
UK NCSC, FBI, and Dutch AIVD warn Iran is using Chosen Brick malware against dissidents and journalistsMalware steals files, captures audio, grabs WhatsApp/Telegram data, and can wip
Hackers Hijack HBO Max’s Reddit Account to Spread Crypto-Stealing Malware
In brief HBO Maxs hijacked Reddit account ran 108 malicious ads over roughly 48 hours.Malwarebytes linked the ads to PasteSwitch, an operation targeting Windows and Mac users with i
Iranian hackers use CHOSEN BRICK Windows malware to spy on targets
Government agencies are warning that Iranian state-linked hackers are using a Windows malware strain named CHOSEN BRICK to target dissidents, activists, and journalists worldwide.
US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware
US, UK, and Dutch government agencies published a report detailing the malware, and the FBI described the abuse of Telegram for C&C.
NCSC and Allies Warn of Iranian Spyware Campaign
The UK and its allies have warned opponents of the Iranian regime that they may be subject to targeting by a Tehran-backed spyware campaign. An advisory published yesterday by the National Cyber Sec
SynGhost
Invisible and Universal Task-agnostic Backdoor Attack via Syntactic Transfer Contributions & Characteristics SynGhost has the following contributions To mitigate the risks of
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has used lures that impersona
UK, U.S. And Netherlands Warn of Iranian Chosen Brick Spyware
Britain, the United States and the Netherlands have issued a joint cybersecurity advisory warning about CHOSEN BRICK, a spyware family that authorities say has been used by Iranian state-linked cyber actors against dissidents, activists and journalists. T
Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists
Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran's intelligence service uses to spy on dissidents, journalists, and activists around the world. The malware is controlled via the Telegram messaging app and can cop
BambooToken Malware Uses MQTT to Control Windows and Linux Systems
Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control Windows and Linux systems. The emerging malware family, codenamed BambooToken, is assessed to be active since at lea