CERT-UA has identified more than 100 compromised websites delivering LunexStealer through fake Cloudflare verification pages and ClickFix techniques, urging organisations to strengthen security controls.
Researchers have identified CrashStealer, a new macOS information stealing malware that uses an Apple notarized dropper to bypass Gatekeeper while targeting browser data, cryptocurrency wallets, password managers, and keychain credentials.
SentinelOne uncovers Gaslight, a new Rust based macOS malware that uses prompt injection to mislead AI assisted malware analysis while stealing sensitive user data through Telegram based command and control.
A large scale malware campaign has compromised 10,000 GitHub repositories, using cloned projects and Trojanized ZIP files to distribute malicious payloads while evading traditional detection mechanisms.
