Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

Malware

Mustang Panda Adds Signed Rootkit to CoolClient

Mustang Panda deploys CoolClient backdoor with a signed Windows rootkit to hide malicious activity, targeting victims in Myanmar, Mongolia, and Pakist

1 min read 7 views Aug 14
Malware

Apple warns users of mercenary spyware attacks

Apple sent threat notifications to users it believes were targeted by mercenary spyware, urging immediate verification and stronger protections.

1 min read 4 views Aug 14
Malware

Jewelbug Uses XG-Web for Espionage and Crypto Fraud

China-linked Jewelbug targets governments and militaries with XG-Web, a browser-based remote-access tool, while also conducting cryptocurrency fraud f

1 min read 4 views Aug 14
Malware

AmnesiaStealer macOS Malware Steals Data

AmnesiaStealer, a Rust-based macOS infostealer, harvests passwords, keychain data, Chromium browser data, and Safari cookies.

1 min read 5 views Aug 14
Malware

Apple sends new mercenary spyware threat alerts

Apple issued new threat notifications on August 13, warning specific iPhone users of possible mercenary spyware attacks.

1 min read 5 views Aug 13
Malware

PATCHCORD Backdoor Hits Afghan Telecom, Indian

A new campaign targets Afghan telecom and South Asian critical infrastructure with the PATCHCORD backdoor, delivered via fake VPN installers.

1 min read 3 views Aug 13
Malware

AmnesiaStealer Hijacks Chromium Sessions on macOS

Researchers found AmnesiaStealer, a Rust-based macOS stealer that hijacks Chromium browsers via a fake GitHub page to steal session data.

1 min read 4 views Aug 13
Malware

WindRelay Android Malware Enables NFC Payment Fraud

New Android malware WindRelay, used with SpyNote RAT, relays NFC card data to fraudsters for contactless payment theft.

1 min read 4 views Aug 13
Malware

Jewelbug Conducts Espionage and Crypto Fraud

Symantec reports that Jewelbug, a threat actor, runs both espionage and cryptocurrency fraud operations, highlighting a convergence of cybercrime tact

1 min read 4 views Aug 13
Malware

Linux Botnet Evooo1Bot Targets Systems

FortiGuard Labs discovered Evooo1Bot, a new multi-functional Linux botnet that lets remote attackers take control of vulnerable systems.

1 min read 4 views Aug 13
Malware

WindRelay Android malware relays NFC card data in real time

Group-IB discovered WindRelay, an Android malware family that captures NFC card data and relays it to attackers in real time, enabling fraudulent tran

1 min read 4 views Aug 13
Malware

Jewelbug APT Mixes Espionage and Crypto Theft

Researchers found the Jewelbug APT using one web panel for both state espionage and cryptocurrency theft, indicating a dual-purpose operation.

1 min read 5 views Aug 13

Want to learn more?

Start your free trial and see Phishlens in action.