Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

All Ransomware Phishing Vulnerabilities Breaches Malware AI Security Cloud Privacy Policy & Law Other
Malware

Fake Adobe, Zoom Updates Deliver ScreenConnect Malware

Securonix uncovered SMOKE#SCREEN, a campaign using fake Zoom/Adobe updates to install weaponized ScreenConnect, granting attackers persistent remote a

1 min read 3 views Aug 05
Malware

Open VSX Removes 77 Malicious Evil Twin Extensions

Manifold Security discovered 77 malicious extensions on Open VSX impersonating legitimate developer tools.

1 min read 4 views Aug 05
Malware

QuickFox VPN Supply Chain Attack Delivers FDMTP Backdoor

Fortinet FortiGuard Labs disclosed a long-standing supply chain attack on QuickFox VPN, active since August 2025, using a trojanized installer to deli

1 min read 5 views Aug 05
Malware

OpenClaw Attacks Signal Shift in Cyber Defense

OpenClaw attacks highlight a fundamentally changed threat landscape driven by AI, urging cybersecurity pros to rethink defense strategies.

1 min read 5 views Aug 05
Malware

Over 400 NPM Packages Infected in ChainDrop Supply Chain

A supply chain attack named ChainDrop infected over 400 NPM packages with malware that steals secrets and propagates via stolen NPM and GitHub credent

1 min read 4 views Aug 05
Malware

SMOKE#SCREEN Uses Fake Zoom Updates to Deploy ScreenConnect

Securonix discovered SMOKE#SCREEN, a multi-wave campaign using fake Zoom updates to install ScreenConnect RMM for persistent remote access and defense

1 min read 4 views Aug 05
Malware

npm Worm Poisons Hundreds of Packages, Steals Credentials

A credential-stealing npm worm spread from [email protected] to hundreds of packages, with 353 poisoned versions across 79 package names verified by SafeDep,

1 min read 4 views Aug 04
Malware

Fake Adobe, Zoom Updates Deliver ScreenConnect RMM

A multi-wave campaign dubbed SMOKE#SCREEN uses social engineering lures about Adobe/Zoom updates and system maintenance to stealthily install ConnectW

1 min read 5 views Aug 04
Malware

Smoke#Screen RMM Takeover Gambit Exposes Threat Actor

Threat actors use diverse social engineering lures and rotating payloads to deliver ScreenConnect for persistent remote access to compromised networks

1 min read 5 views Aug 04
Malware

New XCSSET variant targets macOS devs via compromised Xcode

A new XCSSET variant (v40) is spreading via compromised Xcode projects and GitHub repos, targeting macOS developers.

1 min read 4 views Aug 04
Malware

77 Open VSX extensions found harvesting developer info

Manifold Security discovered 77 malicious 'evil twin' extensions on Open VSX impersonating legitimate tools, exfiltrating system and developer data to

1 min read 4 views Aug 04
Malware

DOUBLECUP LaaS Uses ClickFix and PNG Steganography to

Russian loader-as-a-service DOUBLECUP uses ClickFix lures and steganographic PNGs in browser cache to deliver CountLoader and new DeviceManager RAT.

1 min read 7 views Aug 04

Want to learn more?

Start your free trial and see Phishlens in action.

Schedule a Demo