Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
UAC-0099 Targets Ukrainian Government Personnel With ASHVEIN RAT Hiding Commands in HTML
The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN. According to TrendAI, the malware has been put to use in attacks targeting Ukrainian government personnel. The cybersecurity company
Venezuelan Cartel's Malware Honcho Nabbed for ATM Jackpotting
The first cybercriminal to ever make the FBI's "10 Most Wanted Fugitives" list allegedly infused Tren de Aragua's violent criminal operations with cash.
Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
Cyber-espionage actor UAC-0099 has been steadily refining its flagship dropper in campaigns targeting Ukrainian organizations.
'This is a first for us': Attackers uses poem to infect thousands of servers with malware
A threat actor built malware that reads poems posted on GitHubThe poems are a secret code for the location of C2 serversThe servers instruct the malware to deploy cryptojack
Low-cost Android phones ship with residential proxy malware
A malware campaign dubbed 'Midnight Mimosa' has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies.
FakeGit malware campaign returns with 17,610 malicious GitHub repos
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer.
Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm
The npm package known as "tensorlake," a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 "contains obfuscated malware that harvests credential
RenPy loader infection
posted in Virus, Trojan, Spyware, and Malware Removal Help: Hi, On Oct 4 a fake program was run on this PC, and it turned out to be the RenPy loader. A couple of hours later, I took a look through the PC and uninstalled two programs i
RenPy loader infection
posted in Virus, Trojan, Spyware, and Malware Removal Help: Hi, On Oct 4 a fake program was run on this PC, and it turned out to be the RenPy loader. A couple of hours later, I took a look through the PC and uninstalled two programs i
RenPy loader infection
posted in Virus, Trojan, Spyware, and Malware Removal Help: Hi, On Oct 4 a fake program was run on this PC, and it turned out to be the RenPy loader. A couple of hours later, I took a look through the PC and uninstalled two programs i
RenPy loader infection
posted in Virus, Trojan, Spyware, and Malware Removal Help: Hi, On Oct 4 a fake program was run on this PC, and it turned out to be the RenPy loader. A couple of hours later, I took a look through the PC and uninstalled two programs i
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK and Checkmarx. The activity is assessed to be the work of a