ChainScript RAT Uses Polygon Smart Contracts For Flexible Command Infrastructure
Security researchers identify ChainScript RAT delivered through ClickFix lures, using Polygon smart contracts to rotate command and control infrastructure.
Massive GitHub Malware Campaign Exploits 10,000 Repositories To Distribute Trojanized Payloads
A large scale malware campaign has compromised 10,000 GitHub repositories, using cloned projects and Trojanized ZIP files to distribute malicious payloads while evading traditional detection mechanisms.
Over 140 Mastra NPM Packages Compromised In Supply Chain Attack Using Cryptocurrency Stealing Malware
Researchers have uncovered a supply chain attack targeting the Mastra npm ecosystem, where more than 140 packages were compromised through a hijacked contributor account and a malicious dependency designed to steal cryptocurrency wallet data and sensitive credentials.
Malicious JetBrains Plugins And Chrome Extensions Target AI API Keys And User Conversations
Cybersecurity researchers have uncovered a coordinated campaign involving malicious JetBrains Marketplace plugins and Chrome extensions designed to steal AI provider API keys and capture private conversations from popular AI chat platforms.
North Korean Hackers Use Fake Microsoft Security Alerts To Deliver NarwhalRAT Malware
Researchers uncover a phishing campaign by North Korea linked ScarCruft hackers using fake Microsoft security alerts to deploy NarwhalRAT malware through malicious ZIP and LNK files.
Tampered WordPress Plugin Scripts Expose Sites To Hidden Backdoor Campaign
Trusted JavaScript files linked to PushEngage, OptinMonster, and TrustPulse were tampered with in a supply chain attack, potentially exposing over 1.2 million WordPress sites to hidden backdoors.
Pakistan Linked SideCopy Targets Afghanistan Finance Ministry With Xeno RAT In Spear Phishing Campaign
Cybersecurity researchers have uncovered a spear phishing campaign linked to SideCopy targeting Afghanistan’s Ministry of Finance using Xeno RAT to compromise government systems and gather sensitive data.
New Russia Linked GreyVibe Targets Ukraine With AI Powered Cyberattacks
A newly identified Russia linked cyber group, GREYVIBE, has been linked to persistent cyberattacks against Ukraine using AI assisted malware, phishing campaigns, and spyware targeting military, government, and civilian organizations.
AI Chatbot Recommendations Redirect Users To Cryptojacking Malware Sites, Microsoft Warns
Microsoft warns of a cryptojacking campaign using AI chatbot recommendations to redirect users to malware sites impersonating trusted software utilities.
Threat Actors Exploit FortiClient EMS Vulnerability To Deploy Credential Stealing Malware
Cybersecurity researchers warn that threat actors are exploiting a critical FortiClient EMS vulnerability to distribute credential stealing malware across managed endpoints using malicious PowerShell scripts.
