Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
ClickFix Campaigns Use WordlistLoader to Deliver Amatera
ClickFix-style campaigns now use WordlistLoader to disguise Amatera infostealer as plain text, evading detection.
WordlistLoader and SynkLoader Malware Families Emerge
Researchers found two new malware families, WordlistLoader and SynkLoader, used to deliver payloads and likely sell access to ransomware groups.
Fake GTA VI Leak Spreads Malware
Cybercriminals are baiting gamers with a fake 113GB GTA VI build that hides malware in empty files, exploiting hype to infect victims.
Operation QUICSILVER Hits Myanmar with QUICAgent Backdoor
A China-nexus threat actor targets Myanmar government and IT sectors using graduation ceremony lures to deliver the QUICAgent Go backdoor.
SynkLoader backdoor spreads via fake Teams IT helpdesk
Expel researchers warn of SynkLoader backdoor distributed via fake Microsoft Teams IT helpdesk messages, with modules like PhishLocker harvesting pass
Fake GTA 6 Sites Deliver Infostealer Malware
Cybercriminals are exploiting GTA 6 hype with fake Rockstar sites that deliver infostealer malware to visitors.
Fake Android Updates Hijack Smart Car Displays
Kaspersky found malware targeting Android car head units via fake updates, the first known case of such attacks on infotainment systems.
ToxicPanda Banking Trojan Expands Enterprise Threat
ToxicPanda Android malware now targets enterprise apps, expanding beyond financial trojans with new global reach capabilities.
Fake airline apps spread malware, NordVPN warns
NordVPN discovered a malware campaign impersonating 65 brands, including Ryanair and Emirates, using fake Android apps to trick users into urgent acti
ToxicPanda 2.0 Android Trojan Targets Banking Apps
Researchers discovered ToxicPanda 2.0, an Android banking Trojan and RAT enabling account takeover and on-device fraud, with a wider target scope.
UAT-10147 Uses AI to Scale Server Attacks
Chinese-speaking cybercrime group UAT-10147 targets Windows and Linux web servers globally, using AI and a new SPECTRE tool with EDR bypass and Linux
Fake Codex installer tricks Mac users into running malware
Cato CTRL found a macOS campaign using a fake OpenAI Codex installer. Victims are tricked into pasting a command in Terminal that executes malware.