Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Fire Ant hackers turn Cisco routers into spying platforms
Chinese hacking group Fire Ant compromised Cisco IOS XR routers, deploying custom malware and a new backdoor called BridgeAgent to covertly capture tr
ValleyRAT malware disguised as adware
ValleyRAT is being distributed as fake adware, tricking users into downloading it. The malware can steal data and provide remote access.
Anthropic Warns of Claude Session Hijacking via Infostealers
Anthropic warns that infostealer malware steals Claude login sessions, allowing hackers to hijack accounts and drain usage.
TerminalFix Uses Fake CAPTCHAs to Deploy Backdoor
Microsoft reveals TerminalFix, a ClickFix variant using fake Cloudflare CAPTCHAs to trick users into running malicious commands in Windows Terminal or
Anthropic warns infostealers hijack Claude sessions
Anthropic warns that infostealer malware like Vidar and RedLine is stealing Claude login sessions to drain usage.
Chrome, Edge extensions caught stealing crypto and data
Malicious Chrome and Edge extensions deployed a modular malware framework to steal crypto, credentials, and browser data, active since early 2024.
defendking package added to PyPI
A package named defendking has been added to PyPI. Details are limited due to a page loading error.
ToxicPanda Android Banking Trojan Discovered
ToxicPanda, an Android banking Trojan, can take over phones, steal financial credentials, and initiate unauthorized transactions.
TerminalFix campaign deploys reverse tunnel via multistage
Microsoft observed TerminalFix, a ClickFix variant, targeting organizations via compromised websites.
19 Chrome, Edge Extensions Found Stealing Crypto Wallets
Researchers found 19 Chrome and Edge extensions with code that steals crypto wallet secrets and drains funds, active for six months.
Android TV Malware, VOIP Hijack, Signal Flaw, TeamPCP
This week's security roundup covers Android TV malware, a VOIP hijack, Signal contact discovery concerns, and arrests related to TeamPCP.
APT28 HOOKEDGE Backdoor Hits European Govts
Recorded Future found APT28-linked HOOKEDGE backdoor targeting government and diplomatic orgs in Romania, Spain, and Türkiye from late Sept 2025 to ea