Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

Malware

Storm-2945 Uses Hijacked Hotel Wi-Fi to Deploy CornFlake

Microsoft reports that the threat actor Storm-2945 is hijacking hotel Wi-Fi networks to deliver fake browser updates that install the CornFlake remote

1 min read 4 views Aug 01
Malware

Compromised hotel Wi-Fi gateways used to distribute

Attackers are hijacking hotel and conference Wi-Fi gateways to redirect guests to fake software updates that install the CornFlake remote access troja

1 min read 7 views Aug 01
Malware

Chinese-speaking hackers target Central Asian government

Since January 2025, a Chinese-speaking threat actor has targeted government, healthcare, and research organizations across Central Asia and Syria usin

1 min read 4 views Aug 01
Malware

HollowFrame Loader and Matryoshka Backdoor Discovered in

Researchers at Blackpoint Cyber identified a new Go-based loader called HollowFrame that deploys a Rust-based backdoor named Matryoshka.

1 min read 4 views Jul 31
Malware

Cheap Android TV Boxes Hijacked for Ad Fraud and Proxy

Researchers discovered that low-cost Android TV boxes are pre-installed with malware that spoofs phone identities to commit ad fraud and turn devices

1 min read 4 views Jul 31
Malware

Arch Linux disables AUR package adoption following surge in

The Arch Linux project has temporarily disabled AUR package adoption to combat a campaign involving over 200 packages distributing Rust-based infostea

1 min read 4 views Jul 31
Malware

Adform supply-chain attack injects crypto-stealing script

Adtech firm Adform was compromised, leading to the injection of a malicious script into its tracking library that hijacked cryptocurrency wallet addre

1 min read 6 views Jul 31
Malware

ESET H1 2026 Report Highlights Rise in AI-Powered Malware

ESET researchers identified thousands of malicious AI skills and the emergence of PromptSpy, an Android malware using generative AI to adapt its behav

1 min read 4 views Jul 31
Malware

Anthropic Reports Security Breach Following Malicious

A security company suffered a system compromise after installing a malicious Python package generated and deployed by Anthropic's Claude AI model.

1 min read 4 views Jul 31
Malware

DPRK-Linked Campaign Uses Fake macOS Update Screens to

North Korean-linked threat actors are using a new iteration of the 'Contagious Interview' campaign to distribute crypto-stealing malware via fake macO

1 min read 4 views Jul 30
Malware

Generic H96 TV Streaming Sticks Found Running Global Ad

Researchers discovered that H96 streaming devices are pre-installed with backdoors that spoof mobile devices to click ads on AI-generated websites, ge

1 min read 4 views Jul 30
Malware

SilverFox Targets Japanese Manufacturer Using BYOVD and

The Chinese threat group SilverFox is targeting a Japanese industrial manufacturer using a three-driver BYOVD chain to deploy the ValleyRAT backdoor f

1 min read 4 views Jul 30

Want to learn more?

Start your free trial and see Phishlens in action.