Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push
CERT-UA reports UAC-0145, a Sandworm subgroup, targets Ukrainian IT workers via fake job interviews to install malware.
ChainDrop npm Worm Spreads via Compromised Account
On August 4, 2026, the ChainDrop worm entered npm via a compromised maintainer account, using Ethereum-based C2 infrastructure.
Chrome cuts 7B unwanted notifications daily
Google's Chrome anti-abuse systems reduced unwanted Android notifications by over 7 billion daily in Q1 2026, targeting scams, malware, and phishing.
Sandworm targets IT pros with fake job offers, trojanized
Russian Sandworm hackers use fake job interviews to trick IT pros into installing a trojanized WireGuard VPN client that executes malicious code.
Windows PCs Face 6x Greater Malware Risk Than Macs
Surfshark's analysis finds Windows users face six times greater malware and phishing risk than macOS users, based on its data.
Malware Shuts Down California City Network, 911 Rerouted
A Northern California city's network was shut down due to malware on Friday, rerouting 911 calls to county dispatch.
Banned Chrome Extension Returns, Steals AI Chats Again
A Chrome extension with 300,000 installs was removed for data theft but returned to the store and resumed malicious activities.
Microsoft: FruitStone panel powers Midnight Blizzard Wi-Fi
Microsoft discovered FruitStone, a web panel for the CaptiveCrunch campaign by Midnight Blizzard, which hijacks hotel Wi-Fi to deliver CornFlake and C
Fake CNN Site Tricks Users into Installing Malware
A lookalike CNN homepage offers a fake app that installs malware, taking over PCs. The campaign is unrelated to the real news company.
North Korean spies run local LLMs for AI attacks
Kimsuky operators use local LLMs like Ollama and GPT4All to enhance phishing and malware, avoiding cloud detection.
Kimsuky Builds Offline AI Stack for Phishing and Malware
North Korea's Kimsuky group is running AI offline on its own servers to enhance phishing and automate malware development, according to South Korean f
Malicious Solidity Pro VS Code Extensions Steal Crypto
Researchers found malicious VS Code extensions named Solidity Pro that steal browser wallets and credentials.