Blog & Resources

Security awareness tips, phishing prevention guides, and best practices.

All Ransomware Phishing Vulnerabilities Breaches Malware AI Security Cloud Privacy Policy & Law Other
Malware

Iranian APT Group Nimbus Manticore Targets Aviation and

The Iranian-linked threat actor Nimbus Manticore remains active, continuing to target aviation and software companies with updated malicious tools fol

1 min read 6 views May 26
Malware

Iranian hackers use new malware MiniFast and MiniJunk V2

Iranian state-sponsored hackers, Nimbus Manticore, are distributing new malware families, MiniFast and MiniJunk V2, through phishing and SEO poisoning

1 min read 6 views May 26
Malware

Over 700 websites hijacked in ClickFix malware campaign via

Attackers are exploiting a critical vulnerability in the Ghost CMS to compromise over 700 websites.

1 min read 7 views May 26
Malware

Lazarus Group uses new memory-only RAT, RemotePE, against

North Korea's Lazarus Group is using RemotePE, a new memory-resident RAT, to target financial and cryptocurrency firms.

1 min read 6 views May 25
Malware

TrapDoor Supply Chain Attack Spreads Credential Stealer via

A coordinated supply chain attack named TrapDoor has distributed credential-stealing malware through 34 malicious packages across npm, PyPI, and Crate

1 min read 6 views May 25
Malware

Packagist Supply Chain Attack Leverages GitHub for Linux

Eight PHP packages on Packagist were compromised with malicious code that downloads and executes a Linux binary from GitHub Releases, aiming to steal

1 min read 6 views May 23
Malware

Laravel Lang packages compromised in supply chain attack to

Attackers hijacked Laravel Lang packages on Composer by manipulating GitHub version tags to distribute a cross-platform credential stealer.

1 min read 7 views May 23
Malware

Laravel-Lang PHP Packages Compromised in Supply Chain Attack

Malicious code was injected into several Laravel-Lang PHP packages between Nov 10-14, 2023, distributing a cross-platform credential stealer.

1 min read 5 views May 23
Malware

Megalodon campaign poisons over 5,500 GitHub repositories

An automated campaign dubbed Megalodon injected malicious commits into 5,561 GitHub repositories to steal CI/CD credentials, cloud access tokens, and

1 min read 6 views May 22
Malware

Alleged Kimwolf Botnet Operator Jacob Butler Arrested in

Canadian authorities arrested 23-year-old Jacob Butler for allegedly operating the Kimwolf botnet, which compromised millions of IoT devices to launch

1 min read 6 views May 21
Malware

Chinese APT Group Showboat Deploys CAPTAIN-MORGAN Backdoor

The Chinese APT group Showboat is utilizing a custom Linux backdoor called CAPTAIN-MORGAN to conduct espionage against telecommunications providers in

1 min read 7 views May 21
Malware

Malicious Android Apps Use WebView Automation to Commit

Researchers identified fake Android apps that use WebView automation and JavaScript injection to subscribe users to premium services without consent.

1 min read 11 views May 20

Want to learn more?

Start your free trial and see Phishlens in action.

Schedule a Demo