Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

Malware

Gigabud Trojan Clones Banking Apps to Evade Detection

The Gigabud Android banking trojan now clones banking apps into a separate work profile, breaking the link between malware alerts and fraudulent trans

1 min read 4 views Sep 09
Malware

F5 BIG-IP APM Malware Hides PHP Web Shell in Memory

Sophos reports malware on F5 BIG-IP APM appliances injects a PHP web shell into memory, evading disk-based detection.

1 min read 6 views Sep 09
Malware

Slim Spider Targets Brazilian Banks in Crypto Theft

CrowdStrike uncovered Slim Spider, a Brazil-based threat actor, attacking financial institutions since March 2026 to steal crypto custody secrets.

1 min read 3 views Sep 08
Malware

Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit

A Linux rootkit targeting F5 BIG-IP APM devices intercepts PHP loading to inject a fileless web shell, likely exploiting CVE-2025-53521.

1 min read 4 views Sep 08
Malware

BengalSEO Poisons Bing Results to Push MayaBot Malware

Researchers exposed BengalSEO, an Indian SEO poisoning campaign active since 2015, that manipulates Bing results to deliver MayaBot malware and tech s

1 min read 3 views Sep 08
Malware

Taiwan Hit by First AI Cyberattack in July

In July, Taiwan suffered a sophisticated AI-driven cyberattack targeting government and private networks, suspected to be from Chinese actors.

1 min read 3 views Sep 08
Malware

ClickFix Crypto Theft Uses Google Sheets as C2

Cisco Talos reports a campaign abusing Google Visualization API to fetch malicious JavaScript from Google Sheets, enabling cryptocurrency theft via br

1 min read 3 views Sep 08
Malware

ClickFix campaigns evolve: browser-based and WebDAV attacks

Cisco Talos reveals two ClickFix campaigns: one runs entirely in the browser, another uses WebDAV to deliver a stealer.

1 min read 3 views Sep 08
Malware

DarkTortilla RAT Steals Credit Card Data via Telegram

Analysis shows DarkTortilla RAT exfiltrates credit card numbers, expiration dates, and card types via Telegram.

1 min read 3 views Sep 08
Malware

PEEP Toolkit Backdoors Chrome and Edge

Researchers disclosed PEEP, a Chromium post-exploitation toolkit disguised as a bookmarks extension.

1 min read 5 views Sep 07
Malware

Stuxnet Source Code Reconstructed for Research

A researcher released a reconstructed Stuxnet source code for educational use, based on extensive reverse engineering of the infamous cyber-weapon.

1 min read 3 views Sep 07
Malware

ScreenConnect Abused in Worm-Like VBScript Attacks

Researchers found worm-like activity abusing ConnectWise ScreenConnect to spread a malicious VBScript payload to newly connected systems via diverse i

1 min read 6 views Sep 07

Want to learn more?

Start your free trial and see Phishlens in action.