Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Gigabud Trojan Clones Banking Apps to Evade Detection
The Gigabud Android banking trojan now clones banking apps into a separate work profile, breaking the link between malware alerts and fraudulent trans
F5 BIG-IP APM Malware Hides PHP Web Shell in Memory
Sophos reports malware on F5 BIG-IP APM appliances injects a PHP web shell into memory, evading disk-based detection.
Slim Spider Targets Brazilian Banks in Crypto Theft
CrowdStrike uncovered Slim Spider, a Brazil-based threat actor, attacking financial institutions since March 2026 to steal crypto custody secrets.
Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit
A Linux rootkit targeting F5 BIG-IP APM devices intercepts PHP loading to inject a fileless web shell, likely exploiting CVE-2025-53521.
BengalSEO Poisons Bing Results to Push MayaBot Malware
Researchers exposed BengalSEO, an Indian SEO poisoning campaign active since 2015, that manipulates Bing results to deliver MayaBot malware and tech s
Taiwan Hit by First AI Cyberattack in July
In July, Taiwan suffered a sophisticated AI-driven cyberattack targeting government and private networks, suspected to be from Chinese actors.
ClickFix Crypto Theft Uses Google Sheets as C2
Cisco Talos reports a campaign abusing Google Visualization API to fetch malicious JavaScript from Google Sheets, enabling cryptocurrency theft via br
ClickFix campaigns evolve: browser-based and WebDAV attacks
Cisco Talos reveals two ClickFix campaigns: one runs entirely in the browser, another uses WebDAV to deliver a stealer.
DarkTortilla RAT Steals Credit Card Data via Telegram
Analysis shows DarkTortilla RAT exfiltrates credit card numbers, expiration dates, and card types via Telegram.
PEEP Toolkit Backdoors Chrome and Edge
Researchers disclosed PEEP, a Chromium post-exploitation toolkit disguised as a bookmarks extension.
Stuxnet Source Code Reconstructed for Research
A researcher released a reconstructed Stuxnet source code for educational use, based on extensive reverse engineering of the infamous cyber-weapon.
ScreenConnect Abused in Worm-Like VBScript Attacks
Researchers found worm-like activity abusing ConnectWise ScreenConnect to spread a malicious VBScript payload to newly connected systems via diverse i