Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Fake Crypto AML Checkers Drain Wallets
Malwarebytes found fake crypto AML checkers that trick users into connecting wallets and approving malicious transactions, draining funds.
Grandoreiro Banking Trojan Resurfaces in Mexico
The Grandoreiro banking Trojan has returned with a new campaign targeting Mexico, featuring enhanced evasion techniques post-takedown.
StopAndProtect Turns 2,000 WordPress Sites Into Criminal
Check Point Research uncovered StopAndProtect, a cybercrime operation that hacked nearly 2,000 WordPress sites for malware delivery, data theft, surve
Manic Android malware exfiltrates data via nearby devices
New Android malware Manic targets European users, using Wi-Fi Direct or Bluetooth to relay stolen data through nearby infected devices when C2 is unre
Transparent Tribe Updates Tools for Afghan Attacks
Pakistan-linked Transparent Tribe targets Afghan Taliban-run organizations with refreshed malware, but fails against Indian agencies.
SilkParasite Espionage Hits Central Asian Governments
A new espionage campaign, SilkParasite, targets Central Asian governments with seven RAT families, five of which are newly discovered.
41 Fake Download Sites Redirect Users to Malware
Researchers found 41 websites impersonating games and Windows software, all pushing a malicious installer called Download Studio.
SilkParasite APT Hits Central Asia With RATs
Chinese-nexus group SilkParasite, linked to FamousSparrow, targets Central Asian organizations with spear-phishing and remote access trojans.
2,000 Hacked WordPress Sites Fuel Malware Operation
Researchers uncovered a global cybercrime operation using nearly 2,000 compromised WordPress sites to spread malware and steal data, including documen
MaaS Campaign Combines ClickFix, ErrTraffic, Cruciferra
A malware-as-a-service campaign uses ClickFix social engineering, ErrTraffic delivery, and Cruciferra loader to distribute malware while disabling sec
ToxicPanda 2.0 Android Trojan Targets 349 Banking Apps
Zimperium zLabs discovered ToxicPanda 2.0, a more powerful Android banking trojan targeting 349 apps across 16 countries with new capabilities like AD
Microsoft Ties 30+ Domains to MacSync Stealer
Microsoft Defender Experts linked over 30 rotating domains to MacSync Stealer, a macOS info-stealer, by correlating endpoint and network behaviors acr