Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
Steam forum ClickFix attacks infect gamers with XMRig
Threat actors are using social engineering on Steam forums to trick users into running malicious PowerShell commands that install XMRig cryptominers.
SourTrade Malvertising Campaign Uses Browser Memory to
A malvertising campaign targeting crypto investors uses malicious JavaScript and ServiceWorkers to assemble unique malware payloads directly within th
Brazilian Banking Trojan Actively Targeting Portuguese
Brazilian threat actors are actively distributing banking trojans to Portuguese businesses, leveraging the shared language to facilitate successful at
Fake Bahrain Alert App Used to Deploy Android Surveillance
A malicious Android application masquerading as a Bahraini alert system delivers four-stage spyware via fake Google Play sites, exploiting regional te
FBI Seizes NetNut Proxy Platform and Popa Botnet
The FBI and IRS seized hundreds of domains linked to NetNut, a residential proxy service connected to the Popa botnet that compromised over two millio
Popa Android Botnet Linked to Publicly-Traded Firm Alarum
Security researchers have linked the Popa botnet, which compromises millions of Android TV boxes to create residential proxy networks, to Alarum Techn
AI Chatbots Used to Distribute Cryptojacking Malware
Attackers are using AI chatbot recommendations to trick users into visiting websites that host cryptojacking malware.
Security firms disrupt GlassWorm botnet command-and-control
Security researchers successfully dismantled all four command-and-control (C&C) channels utilized by the GlassWorm malware botnet.
MuddyWater targets 9 countries with DLL side-loading
Iranian state-sponsored MuddyWater group conducted an espionage campaign in Q1 2026, targeting organizations in nine countries across multiple sectors
Megalodon Malware Campaign Compromises Over 5,500 GitHub
A rapid six-hour malware campaign dubbed 'Megalodon' injected malicious code into over 5,500 GitHub repositories.
TeamPCP Group Deploys Shai-Hulud Worm Against Open-Source
The threat actor TeamPCP is spreading the Shai-Hulud worm by exploiting long-standing vulnerabilities in open-source software.
AI Enhances DDoS Attacks, Requiring New Defense Strategies
Attackers are using AI to identify vulnerabilities and launch more sophisticated, adaptive DDoS attacks that can overwhelm traditional defenses.