Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

Malware

PavinLoader Tied to ClickFix and Fake Download Campaigns

Analysis links the PavinLoader malware to ClickFix and fake download campaigns, expanding its known infection chain.

1 min read 6 views Aug 24
Malware

Hackers turn 2,000 WordPress sites into malware

A StopAndProtect campaign compromised nearly 2,000 WordPress sites to spread malware, steal data, and control devices.

1 min read 6 views Aug 24
Malware

Fake AI apps used in 92,000 malware attacks

Kaspersky found 92,000 malicious attacks disguised as AI services in 2026, with fake ChatGPT, Claude, and Gemini apps accounting for most incidents.

1 min read 4 views Aug 24
Malware

ToxicPanda Android malware abuses VPN to block Google Play

ToxicPanda, an Android banking trojan, returns with a more complex variant that uses local VPN and Accessibility permissions to block Google Play and

1 min read 7 views Aug 24
Malware

700+ Fake VPN Extensions Found on Chrome Web Store

Socket identified over 700 fake VPN extensions on the Chrome Web Store, collectively installed 75,000 times, posing security risks to users.

1 min read 6 views Aug 24
Malware

Kitploit Lists dionaea Malware Tool

Kitploit, a cybersecurity tool directory, features dionaea, a malware honeypot for capturing and analyzing malicious code.

1 min read 4 views Aug 24
Malware

Splashtop Shield Fails Virus Protection Tests

Splashtop Shield, an antivirus for family IT support, excels at remote fixes but failed hands-on security tests, showing weak virus protection.

1 min read 4 views Aug 23
Malware

ToxicPanda Android malware blocks Google Play via VPN

ToxicPanda 2.0 abuses VPN permissions to block Google Play, targets 349 apps, and adds ADB abuse for shell access.

1 min read 7 views Aug 23
Malware

CS_SleepMask: New Cobalt Strike Sleep Mask Kit

CS_SleepMask is a tool that modifies Cobalt Strike's sleep mask to evade detection. It helps attackers hide beacon activity from security tools.

1 min read 4 views Aug 22
Malware

2,000 Hacked WordPress Sites Ran Global Crime Ring

Researchers found a vast cybercrime ring operating on 2,000 hacked WordPress sites with outdated versions, used for malicious activities.

1 min read 7 views Aug 22
Malware

MoYu group infects Android car head units with proxy botnet

A supply-chain attack on DoFun car head units spreads JarService malware, turning devices into proxy botnet nodes and ad fraud tools.

1 min read 4 views Aug 22
Malware

Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 Active

New campaigns of banking trojans Manic, Grandoreiro, and ToxicPanda 2.0 target Latin America and Europe with spyware and expanded capabilities.

1 min read 4 views Aug 22

Want to learn more?

Start your free trial and see Phishlens in action.