ChainScript RAT Uses Polygon Smart Contracts For Flexible Command Infrastructure
Security researchers identify ChainScript RAT delivered through ClickFix lures, using Polygon smart contracts to rotate command and control infrastructure.
Anthropic Report Highlights AI Misuse Across Cyber Espionage And Surveillance Campaigns
Anthropic details how threat actors used Claude for cyber attacks, surveillance, influence campaigns, and autonomous operations while outlining actions taken to disrupt the activity.
Russian Cyber Espionage Group Uses Claude To Evade Malware Detection
Anthropic says it disrupted a Russian linked cyber espionage campaign that used Claude to automate malware rebuilding, phishing operations, and infrastructure management.
Node Js Runtime Abuse Linked To Malware Campaigns Targeting Multiple Sectors
Symantec reports that threat actors are abusing the trusted Node.js runtime to deploy malware in attacks targeting government agencies, technology firms, hotels, and financial organizations.
Sality Botnet Disrupted Through International Law Enforcement Operation
International authorities and cybersecurity partners have disrupted the long running Sality botnet by using a P2P sinkhole operation to block malware payload delivery.
Researchers Uncover GuardBreaker Technique Used To Evade AI Malware Analysis
ESET researchers have uncovered the GuardBreaker technique used by Russia aligned UAC 0099 to disrupt AI assisted malware analysis by embedding safety sensitive prompts in malicious code.
Kaspersky Warns Of Updated CoolClient Backdoor Targeting Pakistan And Other Countries
Kaspersky identifies an updated CoolClient backdoor linked to the HoneyMyte group, warning organizations in Pakistan about advanced stealth capabilities and the importance of threat intelligence.
Trojanized npm Packages Deliver AI Powered RedC2 4.0 Linux Backdoor
Cybersecurity researchers discovered 14 npm packages hiding RedC2 4.0 Linux backdoor with AI assisted C2 capabilities, enabling post exploitation activities.
Expired Domain Abuse Fuels Large Scale Scam And Malware Operations
Infoblox has revealed that threat actors are spending millions of dollars on expired domains to inherit trusted reputations and redirect users to scams, gambling platforms and malware infrastructure.
Cybersecurity Groups Warn Users About WhatsApp PKH 500000 Scam Targeting Personal Information
Cybersecurity groups have warned WhatsApp users about the PKH 500000 scam, a phishing campaign that attempts to steal personal information, banking details, and WhatsApp accounts through fraudulent messages.
