Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Breeze Comet Targets Brazilian Financial Systems
Brazil's most sophisticated threat group, Breeze Comet, is attacking financial systems in Brazil and globally, directly stealing money.
Infostealer Logs: Stolen Sessions Bypass MFA
Infostealer logs expose corporate credentials and session cookies, enabling attackers to bypass MFA.
Fake Installers Disable Windows Update and Defender
Microsoft warns of an active campaign using fake software installers to disable Windows Update and weaken Defender, targeting Chinese-speaking users a
US, CrowdStrike act on crypto-theft malware
Federal officials and CrowdStrike disrupted malware behind a $150,000 cryptocurrency theft. Action targets the responsible entities.
Gambling Goblin Hijacks Brazilian Gov Sites via Apache
Chinese-speaking group Gambling Goblin installs malicious Apache modules on Brazilian government and educational servers to redirect visitors to gambl
StreamRat Android Trojan Spread via Meta Ads
A new Android banking trojan, StreamRat, was distributed via fake TV-streaming ads on Meta, targeting Spanish speakers and gaining near-complete devic
Russian Hacker Extradited Over Excel Malware Campaign
A Russian national was extradited from Cyprus to face charges for a malware campaign using Excel attachments that infected thousands of users.
Chinese Cluster Uses Brazilian Sites for SEO Fraud
A Chinese-speaking cybercrime group has compromised Brazilian government and education websites to run an SEO fraud campaign since mid-2025.
CrowdStrike, Feds Dismantle Russian Crypto Malware
CrowdStrike and federal authorities dismantled a Russian malware operation that targeted cryptocurrency for eight years.
Sality P2P Botnet Takedown Announced by DoJ
The U.S. DoJ announced the takedown of the Sality P2P botnet on August 31, 2026, with international partners, disrupting malware payload distribution.
BGP Hijack Serves Malicious Virtualizor Update
Attackers used BGP hijacking and a valid TLS certificate to redirect users to a fake Virtualizor update, delivering malware.
CrowdStrike, FBI dismantle Sality after 23 years
US law enforcement and CrowdStrike began dismantling Sality, a malware active since 2003, according to Reuters.