Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
H1 2026 attacks use legit accounts, blockchain tricks
Gen Threat Labs details two H1 2026 campaigns: banking malware via compromised mailboxes and a Rust-based crypto clipper using Binance Smart Chain for
China-linked LightSpy spyware hits victims in 13 countries
LightSpy, a China-linked spyware, has expanded beyond mainland China to target victims in 13 countries, including the US and Europe, according to rese
ClickFix macOS malware steals crypto and credentials
A Go-based infostealer delivered via ClickFix targets macOS, stealing crypto, passwords, and Keychain data, with transaction redirection.
SilverFox Hijacks Trusted Software and Kernel Drivers to Disable Security Tools
SilverFox has expanded its malware toolkit in a campaign that targeted a Japanese industrial manufacturer. The attackers used a fake invoice email to lure a recipient into downloading a ZIP archive hosted through services that normally appear legitimate. The
QuickFox VPN Installer Hijacked to Spread Malware
Fortinet discovered malicious code in QuickFox VPN's Windows installer, targeting users while avoiding gaming PCs.
TeamPCP Linked to 2020 Cryptojacking Botnet
Researchers traced TeamPCP, behind March's supply chain attacks, to a 2020 cryptojacking operation with the first self-propagating botnet.
Chinese Spyware Tool Active in 13 Countries
Arctic Wolf reports a Chinese-built spyware tool has evolved into broader surveillance tech, now operating in over 13 countries.
Jackalope Virus: A Fictional Malware Myth
The Jackalope virus is a fictional computer virus used in sci-fi and cybersecurity discussions to illustrate malware dangers.
ClickFix Mac Campaign Uses 250+ Domains
Microsoft tracked a macOS ClickFix campaign with 250+ domains that fingerprint visitors, hiding malicious pages from crawlers and targeting Mac users
Chinese VPN QuickFox Tampered to Deliver Backdoor
Fortinet reports that the legitimate QuickFox VPN installer was maliciously altered to secretly download a backdoor onto Windows PCs.
Trojanized npm Packages Hide C2 IPs in Ethereum
Researchers discovered trojanized npm packages 'bianira-ui' and 'fluid-type-ui' using a new EtherHiding variant, NullReceiver, to hide C2 IPs in Ether
Microsoft Warns Hotel Wi-Fi Portals Under Attack
Microsoft uncovered CaptiveCrunch, a Russian malware campaign using fake hotel Wi-Fi portals to steal credentials and deliver malware.