SecurityWeek

Network of 200 GitHub Repositories Used for Malware Infection

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.
Infosecurity Magazine

Vibe-Coded Malware Caught in Active Directory Attack

A threat actor has been caught using AI-generated malware in a real network intrusion, deploying a PowerShell script that an ...
The Hacker News

SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users

SCMBANKER watches banking windows, captures screenshots, hijacks CLABE and card numbers, and can deploy Remote Utilities for ...

Newly discovered PamStealer isn’t your typical macOS malware

Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs ...

WhatsApp file sharing scam alert: CERT-In warns of malware campaign targeting users via fake invoices and bank statements

The Indian Computer Emergency Response Team (CERT-In) has issued a cybersecurity advisory warning users about a malware ...
Decrypt

Fake Mac Clipboard App Delivers New Password-Stealing Malware

A new Mac infostealer dubbed PamStealer impersonates the open-source Maccy clipboard manager to steal passwords and more.

North Korea-Linked macOS Malware Uses Prompt Injection to Evade AI Analysis

SentinelOne says macOS.Gaslight uses prompt injection to mislead AI-based malware analysis, steal data, and use Telegram for ...
SecurityWeek

China-Linked APT Expands Arsenal With New ‘Leash’ Backdoors

UAT-7810, the Chinese APT behind a prolonged espionage infrastructure campaign, has added new backdoors to its arsenal.
Developer Tech

Socket: PyPI and npm payment SDK malware compromises CI/CD

According to Socket, malicious payment SDK packages on npm and PyPI are harvesting developer credentials and CI/CD ...

PureLogs Stealer Hides Behind Fake PDF JavaScript and Blogger Pages in New VEIL#DROP Malware Campaign

PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless ...
Cult of Mac

PamStealer malware poses as a Mac clipboard app — and verifies your password before stealing it

The “free” clipboard manager you just downloaded could be doing more than just copying and pasting text. Researchers recently found a new malware called PamStealer disguised as Maccy, a popular ...