Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Fake Adobe, Zoom updates install ScreenConnect backdoor
SMOKE#SCREEN campaign uses spear-phishing emails and fake portals to disguise ConnectWise ScreenConnect as Adobe/Zoom updates, installing persistent r
QuickFox Supply Chain Attack Installs FDMTP Implant
FortiGuard Lab found a supply chain attack on QuickFox that deploys the FDMTP implant on Windows, giving attackers persistent access.
Russian hackers target hotel Wi-Fi in CaptiveCrunch
Microsoft warns Russian threat actors are abusing hotel and conference Wi-Fi networks to target travelers globally in a campaign called CaptiveCrunch.
ChainDrop npm attack compromises 1,300+ packages
A self-propagating worm named ChainDrop has infected over 1,300 npm packages, including popular caching libraries, via a compromised maintainer's GitH
Midnight Blizzard targets hotel Wi-Fi to steal Microsoft
Russian state-backed group Midnight Blizzard has been exploiting public Wi-Fi at hotels and conferences to steal Microsoft 365 credentials and deploy
Microsoft ties hotel Wi-Fi attacks to Midnight Blizzard
Microsoft attributes the CaptiveCrunch hotel Wi-Fi campaign to Russia-linked Midnight Blizzard, using custom malware to target Microsoft 365 accounts
Microsoft warns of Midnight Blizzard attacks on hotel Wi-Fi
Microsoft warns that the Russian state-sponsored group Midnight Blizzard is targeting hotel Wi-Fi networks to deliver malware and steal credentials fr
Midnight Blizzard hijacks hotel Wi-Fi in credential theft
Microsoft warns of Russia-linked group Midnight Blizzard using CaptiveCrunch to hijack hotel and conference Wi-Fi, stealing guest credentials globally
18 Malicious npm Packages Target Alibaba Developers with
Researchers identified 18 malicious npm packages, including 'lib-mtop', designed to deploy a remote access trojan (RAT) against developers using Aliba
Amazon ties North Korean hackers to AI-driven supply chain
Amazon attributes a surge in open source supply chain attacks to a North Korean hacker group, noting generative AI is changing malware packaging and p
Midnight Blizzard targets hotel Wi-Fi to compromise
Russian threat actor Midnight Blizzard is using compromised hotel Wi-Fi networks to redirect users to phishing sites and deploy custom malware, CornFl
Russian SVR operatives use compromised public Wi-Fi to
Microsoft identified the 'CaptiveCrunch' campaign, where Russian intelligence group Storm-2945 compromises public Wi-Fi portals to deliver infostealer