Category Archives: Threat Alerts
DesckVB RAT Campaign Abuses Google DoubleClick to Bypass Security Filters
Cybersecurity researchers have identified a sophisticated campaign where DesckVB RAT leverages Google DoubleClick to evade enterprise security filters and deliver malicious payloads. Continue reading
SVG Phishing Attacks: How to Stop New Email Security Threats
SANS warns of a surge in SVG phishing campaigns that bypass email security. Learn how these malicious XML files work and how to protect your organization. Continue reading
Signal Phishing Campaign Targets Secure Backup Recovery Keys
A dangerous new Signal phishing campaign is tricking users into revealing their backup recovery keys. Learn how this social engineering attack works and how to protect your encrypted messages. Continue reading
JINX-0164 macOS Malware Targets Crypto Developers and CI/CD Pipelines
Discover how the JINX-0164 threat actor utilizes sophisticated macOS malware to infiltrate cryptocurrency organizations and compromise software supply chains. Continue reading
ChatGPT Malware Targets Windows and Mac Users via Fake Download Site
A dangerous phishing campaign is distributing ChatGPT malware to Windows and macOS users. Learn how to identify this fake site and protect your credentials. Continue reading
FIFA Phishing Scams: FBI Warns of Fake World Cup Ticket Websites
The FBI has issued an urgent warning regarding widespread FIFA phishing scams and spoofed websites targeting fans ahead of the 2026 World Cup. Continue reading
Ghost CMS Vulnerability Exploited: 700+ Websites Hit by ClickFix Malware
A critical Ghost CMS vulnerability is being exploited to hijack over 700 websites, forcing users to execute ClickFix malware via deceptive social engineering. Continue reading
Silent Ransom Group: FBI Warns of In-Person IT Impersonation
The FBI warns that the Silent Ransom Group is now using physical IT impersonation to bypass digital security and exfiltrate sensitive data from organizations. Continue reading
TrapDoor Supply Chain Attack Targets Developers and AI Coding Assistants
A sophisticated supply chain attack codenamed TrapDoor is targeting developers across npm, PyPI, and Crates.io to steal credentials and manipulate AI coding agents. Continue reading