Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
4,200 Malicious Smart Contracts Trick 5,700 Crypto Victims
Researchers found 4,224 malicious smart contracts that deceived 5,742 victims into signing away crypto, with discrepancies in Avalanche counts and col
Chinese Threat Actor Targets iOS Devices Using Leaked
A Chinese threat actor is targeting iOS users via a network of over 100 fake AWS login pages that host the leaked DarkSword exploit kit to deploy GHOS
DOUBLECUP Loader-as-a-Service Uses ClickFix to Hide Malware
The DOUBLECUP service uses ClickFix attacks to trick users into running commands that extract malicious payloads hidden in browser-cached PNG images.
Fake Roblox Xeno Script Launchers Distribute RAT and
Bitdefender discovered a campaign where attackers distribute malicious installers disguised as the Roblox 'Xeno Executor' tool to infect users with a
Midnight Blizzard Hijacks Hotel Wi-Fi Portals to Spread
Russian espionage group Midnight Blizzard compromised captive portals on hotel and conference Wi-Fi networks, redirecting guests to fake browser/OS up
Watchdog Anti-Malware 4.4.15 Released with Enhanced
Watchdog Anti-Malware Premium and Business version 4.4.15 offers advanced malware detection, browser hijacker removal, rootkit/bootkit detection, real
HollowFrame Loader Uses Fake Python DLL to Evade Defender
A new loader framework, HollowFrame, disguises Go code in a fake Python DLL and instructs Microsoft Defender to ignore its directory and process, evad
BTMOB Android RAT Ecosystem Fragments into Uncontrolled
The BTMOB Android remote access trojan has evolved from a centralized service into a fragmented ecosystem of resellers, source-code vendors, and indep
Google Chrome to block malicious New Tab and search engine
Google is developing a feature to prevent malware from abusing enterprise policy keys to force-install extensions that hijack browser settings on unma
Kaspersky report warns over 90% of parked domains redirect
New research from Kaspersky reveals that more than 90% of parked domains are being leveraged to redirect unsuspecting visitors to malicious websites.
Adform JavaScript Script Compromised to Swap Cryptocurrency
Attackers injected malicious code into an Adform JavaScript file on July 27, 2026, to rewrite cryptocurrency wallet addresses on customer websites.
Russian Hackers Use Hotel Wi-Fi Portals to Steal Microsoft
Microsoft identified a campaign dubbed CaptiveCrunch, where the threat actor Storm-2945 hijacked hotel Wi-Fi portals to deploy malware and exfiltrate