Technology ❯ Cybersecurity ❯ Malware

Social Engineering

ClickFix Attacks Cryptocurrency Theft Phishing ClickFix Malvertising Cryptocurrency Supply Chain Attacks Psychological Manipulation ClickFix Prompts CAPTCHA Exploits

Fake Online Reputation Used to Push Rust Crypto Clipper

Check Point Research says the campaign shows attackers are building synthetic trust to get users and automated systems to run malicious crypto tools.

JINX-0164 Uses Fake Recruiter Lures to Deliver macOS Malware to Crypto Developers

Mac Malware ‘Reaper’ Uses AppleScript to Evade Fix, Steal Passwords and Crypto

WhatsApp Discloses Patches for File-Spoofing and URL-Handling Flaws

North Korea’s Lazarus Group Launches ‘Mach-O Man’ Mac Malware Targeting Crypto Executives

Hackers Exploit Obsidian Plugins to Deploy Blockchain-Controlled PHANTOMPULSE RAT

Mac ClickFix Campaign Shifts to Script Editor via Applescript Links

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

Microsoft Warns of WhatsApp VBS Malware Targeting Windows PCs

Microsoft Warns WhatsApp-Delivered VBS Attack Uses Renamed Windows Tools to Seize PCs

Apple Adds Terminal Paste Warning in macOS Tahoe 26.4 to Flag Risky Commands

Aryaka Uncovers ‘BlackSanta’ Malware That Kills EDR in Year-Long HR Resume Campaign

Researchers Expose 'InstallFix' Malvertising Cloning Claude Code Install Pages to Deliver Infostealers

Microsoft Details ClickFix Variant Using DNS Lookups to Stage Malware

Fake Booking.com BSOD Lures Install DCRat via MSBuild in European Hotel Hack

Fake Windows Update Screens Drive Ongoing ClickFix Malware Wave

Google Opens Early Access to Android Developer Verification, Plans 'Advanced Flow' for Power Users

ClickFix Scams Add OS Detection, Auto-Copy and Video Tutorials as Malvertising Push Expands

U.S. Sanctions North Korean Bankers and Front Companies Over Crypto Laundering for Weapons Programs

DPRK‑Linked Group Uses Blockchain Smart Contracts to Deliver Malware in Ongoing Hiring Lures