Technology ❯ Cybersecurity ❯ Malware

Social Engineering

ClickFix Attacks Phishing ClickFix Cryptocurrency Theft Malvertising Cryptocurrency Supply Chain Attacks Psychological Manipulation ClickFix Prompts CAPTCHA Exploits

WhatsApp Discloses Patches for File-Spoofing and URL-Handling Flaws

The fixes address weaknesses that could aid phishing without any sign of real-world attacks.

North Korea’s Lazarus Group Launches ‘Mach-O Man’ Mac Malware Targeting Crypto Executives

Hackers Exploit Obsidian Plugins to Deploy Blockchain-Controlled PHANTOMPULSE RAT

Mac ClickFix Campaign Shifts to Script Editor via Applescript Links

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

Microsoft Warns of WhatsApp VBS Malware Targeting Windows PCs

Microsoft Warns WhatsApp-Delivered VBS Attack Uses Renamed Windows Tools to Seize PCs

Apple Adds Terminal Paste Warning in macOS Tahoe 26.4 to Flag Risky Commands

Aryaka Uncovers ‘BlackSanta’ Malware That Kills EDR in Year-Long HR Resume Campaign

Researchers Expose 'InstallFix' Malvertising Cloning Claude Code Install Pages to Deliver Infostealers

Microsoft Details ClickFix Variant Using DNS Lookups to Stage Malware

Fake Booking.com BSOD Lures Install DCRat via MSBuild in European Hotel Hack

Fake Windows Update Screens Drive Ongoing ClickFix Malware Wave

Google Opens Early Access to Android Developer Verification, Plans 'Advanced Flow' for Power Users

ClickFix Scams Add OS Detection, Auto-Copy and Video Tutorials as Malvertising Push Expands

U.S. Sanctions North Korean Bankers and Front Companies Over Crypto Laundering for Weapons Programs

DPRK‑Linked Group Uses Blockchain Smart Contracts to Deliver Malware in Ongoing Hiring Lures

Malicious npm Packages Tap Ethereum Smart Contracts for Stealthy C2

Malvertising Campaign Targets macOS With New 'Shamos' Stealer, CrowdStrike Says

ClickFix Malware Exploits Trusted Sites to Fuel New Infection Waves