Technology ❯ Cybersecurity ❯ Malware

Credential Theft

StealC Supply Chain Attacks Ransomware VPN Clients Infostealers Overlay Attacks AI Exploits DeepLoad Persistent Threats Supply Chain Compromise

CloudSEK Publishes Dataset Linking LiteLLM PyPI Attack to 2,500+ Organizations

The searchable dataset reconstructs roughly 434,000 CI/CD pipeline events to highlight why exposed credentials must be rotated immediately.

Microsoft Warns ClickFix Campaign Uses BNB Chain to Host Malware Instructions

ChainDrop Worm Infects Hundreds of npm Packages

Russian State‑Linked APT Uses Hotel Wi‑Fi Captive Portals to Steal Microsoft 365 Credentials

PamStealer Verifies macOS Passwords Through PAM Before Stealing Data

Gentlemen RaaS Centralizes EDR-Killers in GentleKiller Suite

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

Mac Malware ‘Reaper’ Uses AppleScript to Evade Fix, Steal Passwords and Crypto

PCPJack Malware Evicts TeamPCP From Cloud Systems and Harvests Credentials

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

University of California Finds Malicious AI Routers Stealing Credentials and Draining Test Wallets

ReliaQuest Uncovers DeepLoad Malware Using ClickFix and AI Evasion to Steal Enterprise Credentials

TeamPCP Backdoors LiteLLM on PyPI, Forcing Emergency Secret Rotations

Microsoft Exposes SEO-Poisoned Fake VPN Installers That Steal Enterprise Credentials

Fake Cloudflare CAPTCHA on Hacked WordPress Sites Drives Global Infostealer Campaign

New Sturnus Android Trojan Bypasses Encrypted Chats and Enables Full Device Takeover

New 'Herodotus' Android Banking Trojan Mimics Human Typing to Evade Detection as Campaigns Hit Italy and Brazil

DPRK‑Linked Group Uses Blockchain Smart Contracts to Deliver Malware in Ongoing Hiring Lures

New Malware Locks Chrome Users in Kiosk Mode to Steal Google Passwords