Threat Analysis

Vulnerabilities Indicators of Compromise Malware Detection Exploits Malware Analysis Attack Vectors Malware Campaigns Incident Response Malicious Software Google TAG

3 ARTICLES

2w ago

SMOKE#SCREEN Campaign Uses Fake Updates to Install ScreenConnect and Give Attackers Remote Access

Securonix researchers warn the operation uses legitimate signed RMM installers and trusted hosting to route infected agents to attacker-controlled relay servers and evade detection.

4 ARTICLES

4w ago

Malicious Claude.ai Artifact Served by Bing Ads Delivered SectopRAT to 29 Organizations

8 ARTICLES

last mo.

GodDamn Ransomware Uses Microsoft-Signed PoisonX Driver to Blind Endpoint Defenses

3 ARTICLES

last mo.

PamStealer Verifies macOS Passwords Through PAM Before Stealing Data

7 ARTICLES

last mo.

PamStealer Poses as Maccy to Validate and Steal macOS Passwords

3 ARTICLES

2mo ago

Gentlemen RaaS Centralizes EDR-Killers in GentleKiller Suite

11 ARTICLES

2mo ago

Rokarolla Trojan Seizes Android Phones to Steal From 217 Banking and Crypto Apps

6 ARTICLES

2mo ago

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

10 ARTICLES

3mo ago

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

9 ARTICLES

3mo ago

Fragnesia Linux Kernel Flaw Gives Local Users Root Access

7 ARTICLES

3mo ago

German Warnings Mount Over Anthropic’s Claude Mythos as U.S. Weighs Pre‑Release Reviews

Threat Analysis

SMOKE#SCREEN Campaign Uses Fake Updates to Install ScreenConnect and Give Attackers Remote Access

Malicious Claude.ai Artifact Served by Bing Ads Delivered SectopRAT to 29 Organizations

HOLLOWGRAPH Malware Uses Microsoft 365 Calendars as a Covert C2 Channel

ClickLock Stealer Locks Mac Desktops and Forces Users to Reveal Passwords

OkoBot Malware Injects Fake Seed Prompts into Ledger and Trezor Apps

CrashStealer: Notarized macOS Dropper Steals Passwords and Keychain

Multi‑Stage Malware Found in Four AsyncAPI npm Packages

Attackers Spoof OAuth Client IDs to Evade Microsoft Entra Sign-In Logs

Australia Warns of Mass CMS Exploitation Campaign Deploying Webshells

Zimbra Patches Critical Classic Web Client XSS

Never miss stories about

Threat Analysis

GigaWiper Backdoor Merges Spy Capabilities With Multiple Irreversible Wipers

GodDamn Ransomware Uses Microsoft-Signed PoisonX Driver to Blind Endpoint Defenses

PamStealer Verifies macOS Passwords Through PAM Before Stealing Data

PamStealer Poses as Maccy to Validate and Steal macOS Passwords

Gentlemen RaaS Centralizes EDR-Killers in GentleKiller Suite

Rokarolla Trojan Seizes Android Phones to Steal From 217 Banking and Crypto Apps

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

Fragnesia Linux Kernel Flaw Gives Local Users Root Access

German Warnings Mount Over Anthropic’s Claude Mythos as U.S. Weighs Pre‑Release Reviews

Never miss stories about

Threat Analysis