Threat Analysis

Vulnerabilities Malware Analysis Malware Detection Malware Campaigns Indicators of Compromise Exploits Attack Vectors Incident Response Malware Types Google Threat Analysis Group

4 ARTICLES

last wk.

StyleSmuggler Zero-Day Used to Backdoor Adobe Commerce and Magento Stores

Security researchers say the flaw lets attackers inject PHP into templates to trigger remote code execution and install stealthy backdoors on live storefronts.

3 ARTICLES

last wk.

Evooo1Bot Identified as Mirai-Derived Botnet That Turns Edge Devices Into SOCKS5 Proxies

3 ARTICLES

4w ago

AmnesiaStealer Gives Attackers Live Remote Control of macOS Browser Sessions

4 ARTICLES

last mo.

SMOKE#SCREEN Campaign Uses Legitimate ScreenConnect Installs to Give Attackers Persistent Access

3 ARTICLES

last mo.

77 Evil-Twin Extensions Removed From Open VSX After Data-Collection Campaign

4 ARTICLES

last mo.

Malicious Claude.ai Artifact Served by Bing Ads Delivered SectopRAT to 29 Organizations

8 ARTICLES

last mo.

HOLLOWGRAPH Malware Uses Microsoft 365 Calendars as a Covert C2 Channel

8 ARTICLES

2mo ago

ClickLock Stealer Locks Mac Desktops and Forces Users to Reveal Passwords

3 ARTICLES

2mo ago

OkoBot Malware Injects Fake Seed Prompts into Ledger and Trezor Apps

16 ARTICLES

2mo ago

CrashStealer: Notarized macOS Dropper Steals Passwords and Keychain

Threat Analysis

StyleSmuggler Zero-Day Used to Backdoor Adobe Commerce and Magento Stores

ScreenConnect File-Transfer Flaw Lets Rogue Clients Spread VBScript Worm

HiddenLayer Raises $100 Million Series B to Scale AI Runtime Security

Signed Chinese Wallpaper App Used to Sideload ValleyRAT Backdoor

Fake OpenAI Codex Ads Lure Mac Users to Terminal-Based Malware

ToxicPanda 2.0 Hijacks Android Features to Take Over Phones and Banking Apps

Malware Turns Android Car Head Units into Proxy Nodes

Manic Malware Can Relay Stolen Data Through Nearby Infected Android Phones

Typosquatted Rust Crate Delivered Build‑Time Backdoor

ToxicPanda 2.0 Broadens Android Banking Attacks to 349 Financial Apps

Never miss stories about

Threat Analysis

Microsoft Links 30+ Rotating Domains to MacSync Stealer by Tracking Behavior

Evooo1Bot Identified as Mirai-Derived Botnet That Turns Edge Devices Into SOCKS5 Proxies

AmnesiaStealer Gives Attackers Live Remote Control of macOS Browser Sessions

SMOKE#SCREEN Campaign Uses Legitimate ScreenConnect Installs to Give Attackers Persistent Access

77 Evil-Twin Extensions Removed From Open VSX After Data-Collection Campaign

Malicious Claude.ai Artifact Served by Bing Ads Delivered SectopRAT to 29 Organizations

HOLLOWGRAPH Malware Uses Microsoft 365 Calendars as a Covert C2 Channel

ClickLock Stealer Locks Mac Desktops and Forces Users to Reveal Passwords

OkoBot Malware Injects Fake Seed Prompts into Ledger and Trezor Apps

CrashStealer: Notarized macOS Dropper Steals Passwords and Keychain

Never miss stories about

Threat Analysis