Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Mustang Panda Adds Signed Rootkit to CoolClient
Mustang Panda deploys CoolClient backdoor with a signed Windows rootkit to hide malicious activity, targeting victims in Myanmar, Mongolia, and Pakist
Apple warns users of mercenary spyware attacks
Apple sent threat notifications to users it believes were targeted by mercenary spyware, urging immediate verification and stronger protections.
Jewelbug Uses XG-Web for Espionage and Crypto Fraud
China-linked Jewelbug targets governments and militaries with XG-Web, a browser-based remote-access tool, while also conducting cryptocurrency fraud f
AmnesiaStealer macOS Malware Steals Data
AmnesiaStealer, a Rust-based macOS infostealer, harvests passwords, keychain data, Chromium browser data, and Safari cookies.
Apple sends new mercenary spyware threat alerts
Apple issued new threat notifications on August 13, warning specific iPhone users of possible mercenary spyware attacks.
PATCHCORD Backdoor Hits Afghan Telecom, Indian
A new campaign targets Afghan telecom and South Asian critical infrastructure with the PATCHCORD backdoor, delivered via fake VPN installers.
AmnesiaStealer Hijacks Chromium Sessions on macOS
Researchers found AmnesiaStealer, a Rust-based macOS stealer that hijacks Chromium browsers via a fake GitHub page to steal session data.
WindRelay Android Malware Enables NFC Payment Fraud
New Android malware WindRelay, used with SpyNote RAT, relays NFC card data to fraudsters for contactless payment theft.
Jewelbug Conducts Espionage and Crypto Fraud
Symantec reports that Jewelbug, a threat actor, runs both espionage and cryptocurrency fraud operations, highlighting a convergence of cybercrime tact
Linux Botnet Evooo1Bot Targets Systems
FortiGuard Labs discovered Evooo1Bot, a new multi-functional Linux botnet that lets remote attackers take control of vulnerable systems.
WindRelay Android malware relays NFC card data in real time
Group-IB discovered WindRelay, an Android malware family that captures NFC card data and relays it to attackers in real time, enabling fraudulent tran
Jewelbug APT Mixes Espionage and Crypto Theft
Researchers found the Jewelbug APT using one web panel for both state espionage and cryptocurrency theft, indicating a dual-purpose operation.