Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

Malware

Fake Adobe, Zoom updates install ScreenConnect backdoor

SMOKE#SCREEN campaign uses spear-phishing emails and fake portals to disguise ConnectWise ScreenConnect as Adobe/Zoom updates, installing persistent r

1 min read 4 views Aug 04
Malware

QuickFox Supply Chain Attack Installs FDMTP Implant

FortiGuard Lab found a supply chain attack on QuickFox that deploys the FDMTP implant on Windows, giving attackers persistent access.

1 min read 4 views Aug 04
Malware

Russian hackers target hotel Wi-Fi in CaptiveCrunch

Microsoft warns Russian threat actors are abusing hotel and conference Wi-Fi networks to target travelers globally in a campaign called CaptiveCrunch.

1 min read 4 views Aug 04
Malware

ChainDrop npm attack compromises 1,300+ packages

A self-propagating worm named ChainDrop has infected over 1,300 npm packages, including popular caching libraries, via a compromised maintainer's GitH

1 min read 4 views Aug 04
Malware

Midnight Blizzard targets hotel Wi-Fi to steal Microsoft

Russian state-backed group Midnight Blizzard has been exploiting public Wi-Fi at hotels and conferences to steal Microsoft 365 credentials and deploy

1 min read 4 views Aug 04
Malware

Microsoft ties hotel Wi-Fi attacks to Midnight Blizzard

Microsoft attributes the CaptiveCrunch hotel Wi-Fi campaign to Russia-linked Midnight Blizzard, using custom malware to target Microsoft 365 accounts

1 min read 4 views Aug 04
Malware

Microsoft warns of Midnight Blizzard attacks on hotel Wi-Fi

Microsoft warns that the Russian state-sponsored group Midnight Blizzard is targeting hotel Wi-Fi networks to deliver malware and steal credentials fr

1 min read 5 views Aug 04
Malware

Midnight Blizzard hijacks hotel Wi-Fi in credential theft

Microsoft warns of Russia-linked group Midnight Blizzard using CaptiveCrunch to hijack hotel and conference Wi-Fi, stealing guest credentials globally

1 min read 4 views Aug 04
Malware

18 Malicious npm Packages Target Alibaba Developers with

Researchers identified 18 malicious npm packages, including 'lib-mtop', designed to deploy a remote access trojan (RAT) against developers using Aliba

1 min read 4 views Aug 04
Malware

Amazon ties North Korean hackers to AI-driven supply chain

Amazon attributes a surge in open source supply chain attacks to a North Korean hacker group, noting generative AI is changing malware packaging and p

1 min read 4 views Aug 03
Malware

Midnight Blizzard targets hotel Wi-Fi to compromise

Russian threat actor Midnight Blizzard is using compromised hotel Wi-Fi networks to redirect users to phishing sites and deploy custom malware, CornFl

1 min read 4 views Aug 03
Malware

Russian SVR operatives use compromised public Wi-Fi to

Microsoft identified the 'CaptiveCrunch' campaign, where Russian intelligence group Storm-2945 compromises public Wi-Fi portals to deliver infostealer

1 min read 4 views Aug 03

Want to learn more?

Start your free trial and see Phishlens in action.