Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
PavinLoader Tied to ClickFix and Fake Download Campaigns
Analysis links the PavinLoader malware to ClickFix and fake download campaigns, expanding its known infection chain.
Hackers turn 2,000 WordPress sites into malware
A StopAndProtect campaign compromised nearly 2,000 WordPress sites to spread malware, steal data, and control devices.
Fake AI apps used in 92,000 malware attacks
Kaspersky found 92,000 malicious attacks disguised as AI services in 2026, with fake ChatGPT, Claude, and Gemini apps accounting for most incidents.
ToxicPanda Android malware abuses VPN to block Google Play
ToxicPanda, an Android banking trojan, returns with a more complex variant that uses local VPN and Accessibility permissions to block Google Play and
700+ Fake VPN Extensions Found on Chrome Web Store
Socket identified over 700 fake VPN extensions on the Chrome Web Store, collectively installed 75,000 times, posing security risks to users.
Kitploit Lists dionaea Malware Tool
Kitploit, a cybersecurity tool directory, features dionaea, a malware honeypot for capturing and analyzing malicious code.
Splashtop Shield Fails Virus Protection Tests
Splashtop Shield, an antivirus for family IT support, excels at remote fixes but failed hands-on security tests, showing weak virus protection.
ToxicPanda Android malware blocks Google Play via VPN
ToxicPanda 2.0 abuses VPN permissions to block Google Play, targets 349 apps, and adds ADB abuse for shell access.
CS_SleepMask: New Cobalt Strike Sleep Mask Kit
CS_SleepMask is a tool that modifies Cobalt Strike's sleep mask to evade detection. It helps attackers hide beacon activity from security tools.
2,000 Hacked WordPress Sites Ran Global Crime Ring
Researchers found a vast cybercrime ring operating on 2,000 hacked WordPress sites with outdated versions, used for malicious activities.
MoYu group infects Android car head units with proxy botnet
A supply-chain attack on DoFun car head units spreads JarService malware, turning devices into proxy botnet nodes and ad fraud tools.
Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 Active
New campaigns of banking trojans Manic, Grandoreiro, and ToxicPanda 2.0 target Latin America and Europe with spyware and expanded capabilities.