Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

Operation Navy Ghost is targeting Python developers who build Telegram bots by hiding backdoors inside trojanized Pyrogram forks uploaded to PyPI. The campaign has been active since November 2025, ...

The malware program has been deployed across multiple sectors since April, helping to provide initial access sold to ransomware gangs.

When Windows fails, this tiny USB drive takes over.

A fake repository mimicking OpenAI’s Privacy Filter on Hugging Face accumulated ~244,000 downloads before being removed. It delivered a multi-stage Rust infostealer ...

The stealthy Python-based backdoor framework deploys a persistent Windows implant likely designed for espionage. A newly identified stealthy Python-based backdoor framework provides attackers with ...

A stealthy Python-based backdoor framework capable of long-term surveillance and credential theft has been identified targeting Windows systems. According to research from Securonix, the malware, ...

On October 14, 2025, Microsoft officially ended support for Windows 10 — terminating security patches for an operating system still running on roughly 62% of all Windows PCs worldwide at the time of ...

A fake Chrome and Edge extension called NexShield pretended to be a legitimate ad blocker to lure users. Once installed, it intentionally crashes the browser to create panic and a sense of urgency.

Researchers with cybersecurity firm ESET last year reported that the use of ClickFix methods in attacks grew more than 500% during the first half of 2025 compared with the last six months of the year ...

ClickFix attacks have evolved to meet the latest defense measures by using a new command to circumvent security and make people infect their own devices with malware — in this case, a remote access ...

Fake browser extensions are nothing new, but this one takes things a step further by deliberately breaking your computer to scare you into infecting it. Security researchers have uncovered a malicious ...