Technology ❯ Cybersecurity ❯ Malware

Credential Theft

StealC VPN Clients Supply Chain Attacks Exfiltration Techniques AI Exploits Infostealers Overlay Attacks Supply Chain Compromise DeepLoad Persistent Threats Shai-Hulud Worm Password Managers North Korean Hackers Lumma Stealer PCPJack WordPress Exploits LLM Routers OnyxC2 GitHub Actions PamStealer TrickMo Malicious Packages Exploits Browser Security Ransomware OxideHarvest Malicious Actors Keylogging macOS Malware

PamStealer Verifies macOS Passwords Through PAM Before Stealing Data

Jamf says the Rust‑based Apple Silicon stealer uses host fingerprinting, fake Full Disk Access prompts, lookalike downloads to reach selected Macs.

Gentlemen RaaS Centralizes EDR-Killers in GentleKiller Suite

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

Mac Malware ‘Reaper’ Uses AppleScript to Evade Fix, Steal Passwords and Crypto

PCPJack Malware Evicts TeamPCP From Cloud Systems and Harvests Credentials

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

University of California Finds Malicious AI Routers Stealing Credentials and Draining Test Wallets

ReliaQuest Uncovers DeepLoad Malware Using ClickFix and AI Evasion to Steal Enterprise Credentials

TeamPCP Backdoors LiteLLM on PyPI, Forcing Emergency Secret Rotations

Microsoft Exposes SEO-Poisoned Fake VPN Installers That Steal Enterprise Credentials

New Sturnus Android Trojan Bypasses Encrypted Chats and Enables Full Device Takeover

New 'Herodotus' Android Banking Trojan Mimics Human Typing to Evade Detection as Campaigns Hit Italy and Brazil

DPRK‑Linked Group Uses Blockchain Smart Contracts to Deliver Malware in Ongoing Hiring Lures