Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Apple Warns iPhone Users in 110 Countries of Spyware
Apple sent high-confidence threat notifications to users in 110 countries, warning of possible mercenary spyware attacks targeting their devices.
C2Looper: Rust Backdoor Linked to Ransomware
Zscaler discovered C2Looper, a new Rust-based backdoor likely tied to ransomware, using GitHub for command-and-control.
Lumma Stealer hides in pirated The Odyssey copies
Bitdefender warns that pirated copies of The Odyssey contain Lumma Stealer, which steals credentials and data.
Infostealers Harvest 1.7B Credentials in 6 Months
Flashpoint reports 7.4 million devices infected with infostealer malware in H1 2026, a 27% rise, harvesting 1.7 billion credentials.
AmnesiaStealer macOS malware hijacks browser sessions
AmnesiaStealer, a new macOS infostealer, uses ClickFix attacks to steal data and remotely control victims' browsers via cloned Chromium profiles.
APT36 Suspected in PATCHCORD Espionage via Google Sheets
Acronis uncovered PATCHCORD, a backdoor targeting Afghan telecom and South Asian infrastructure via fake VPN tools and Google Sheets C2.
Expired Domains Bought by Crooks for Malware
Attackers re-register expired domains to leverage their reputation and traffic for malware delivery, scams, and command-and-control infrastructure.
Expired Domains Bought by Crooks for Malware
Attackers re-register expired domains to leverage their reputation and traffic for malware delivery, scams, and C2 infrastructure.
ChainDrop npm worm infects 444 packages
A new Shai-Hulud variant, ChainDrop, spread via npm tarballs, infecting 444 packages with 2B monthly downloads.
Evooo1Bot botnet targets routers for proxy relay
A new Mirai-based Linux botnet, Evooo1Bot, targets routers and IoT devices, turning them into SOCKS5 proxies for credential theft, SSH brute-forcing,
Hackers Spend $7M on Expired Domains for Scams
Threat actors spent nearly $7 million on expired domains to redirect traffic to scams and malware, per Infoblox.
Cheap TV boxes may secretly click ads for fraud
Streaming boxes can run hidden ad-clicking malware in the background, generating fraudulent ad revenue without user knowledge.