Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

Malware

Apple Warns iPhone Users in 110 Countries of Spyware

Apple sent high-confidence threat notifications to users in 110 countries, warning of possible mercenary spyware attacks targeting their devices.

1 min read 5 views Aug 17
Malware

C2Looper: Rust Backdoor Linked to Ransomware

Zscaler discovered C2Looper, a new Rust-based backdoor likely tied to ransomware, using GitHub for command-and-control.

1 min read 4 views Aug 17
Malware

Lumma Stealer hides in pirated The Odyssey copies

Bitdefender warns that pirated copies of The Odyssey contain Lumma Stealer, which steals credentials and data.

1 min read 4 views Aug 17
Malware

Infostealers Harvest 1.7B Credentials in 6 Months

Flashpoint reports 7.4 million devices infected with infostealer malware in H1 2026, a 27% rise, harvesting 1.7 billion credentials.

1 min read 4 views Aug 17
Malware

AmnesiaStealer macOS malware hijacks browser sessions

AmnesiaStealer, a new macOS infostealer, uses ClickFix attacks to steal data and remotely control victims' browsers via cloned Chromium profiles.

1 min read 4 views Aug 16
Malware

APT36 Suspected in PATCHCORD Espionage via Google Sheets

Acronis uncovered PATCHCORD, a backdoor targeting Afghan telecom and South Asian infrastructure via fake VPN tools and Google Sheets C2.

1 min read 6 views Aug 16
Malware

Expired Domains Bought by Crooks for Malware

Attackers re-register expired domains to leverage their reputation and traffic for malware delivery, scams, and command-and-control infrastructure.

1 min read 4 views Aug 15
Malware

Expired Domains Bought by Crooks for Malware

Attackers re-register expired domains to leverage their reputation and traffic for malware delivery, scams, and C2 infrastructure.

1 min read 5 views Aug 15
Malware

ChainDrop npm worm infects 444 packages

A new Shai-Hulud variant, ChainDrop, spread via npm tarballs, infecting 444 packages with 2B monthly downloads.

1 min read 5 views Aug 15
Malware

Evooo1Bot botnet targets routers for proxy relay

A new Mirai-based Linux botnet, Evooo1Bot, targets routers and IoT devices, turning them into SOCKS5 proxies for credential theft, SSH brute-forcing,

1 min read 4 views Aug 15
Malware

Hackers Spend $7M on Expired Domains for Scams

Threat actors spent nearly $7 million on expired domains to redirect traffic to scams and malware, per Infoblox.

1 min read 4 views Aug 15
Malware

Cheap TV boxes may secretly click ads for fraud

Streaming boxes can run hidden ad-clicking malware in the background, generating fraudulent ad revenue without user knowledge.

1 min read 4 views Aug 14

Want to learn more?

Start your free trial and see Phishlens in action.