New threat actors were seen leveraging legitimate but compromised websites to distribute malware. One of them, dubbed FrigidStealer, is a new macOS-specific infostealer disseminated via fake browser updates. It collects…

The Earth Preta APT group leverages MAVInject and Setup Factory in its malicious activities. These tools are used to deploy payloads, bypass ESET antivirus, and maintain control over compromised systems.…

Bayhealth data breach claimed last year by threat actors has been announced by the healthcare in a consumer notice. Rhysida ransomware group threatened to expose stolen data in August. The…

A novel strain of the Snake keylogger added deploying an AutoIt-compiled payload to its known data-stealing capabilities. The malware can exfiltrate stolen data while avoiding traditional detection mechanisms Hiding its…

The Minister for Information and Communications in the Philippines announced attempted cyberattacks. Philippine government systems were targeted by threat actors who tried to steal data, not cause disruptions. These cyber…

Fintech company Xactus confirmed that it suffered a data breach in a court notice. The company discovered the incident on July 15, 2024, and internal investigations were completed on January…

The XMRig cryptominer was hidden in torrents for popular games such as BeamNG.drive, Garry’s Mod, and Dyson Sphere Program. The cryptominer campaign operated globally, leveraging torrent sites to distribute trojanized…