Category Archives: Threat Alerts
npm Supply Chain Attack: Self-Propagating Shai-Hulud Worm Hits Millions
A massive npm supply chain attack involving the self-propagating Shai-Hulud worm has compromised over 1,300 package versions, threatening developers worldwide. Continue reading
COLDCARD Phishing Campaign Uses Live Chat and RMM Software to Steal Crypto
A dangerous COLDCARD phishing campaign uses spoofed alerts, live human chat operators, and RMM software to trick users into granting remote desktop access. Continue reading
SMOKE SCREEN Campaign Uses Fake Software Updates to Deploy ScreenConnect
Discover how the new SMOKE SCREEN campaign uses fake Adobe and Zoom updates to deploy ScreenConnect for persistent remote access. Continue reading
DOUBLECUP ClickFix Service Hides Malware in Cached Browser Images
Discover how the new DOUBLECUP ClickFix Service bypasses security by hiding advanced malware payloads inside cached browser images. Continue reading
Water Utility PLCs Target of Urgent CISA Advisory Following Cyberattacks
CISA has issued an urgent cyber threat advisory after escalating attacks on water utility PLCs compromised operational technology across multiple states. Continue reading
Laundry Bear Exploits OWA Vulnerability in Half-Click Phishing Campaign
Russian threat actor Laundry Bear is exploiting an OWA vulnerability using a stealthy half-click phishing campaign to harvest mailbox data. Continue reading
Exchange OWA Zero-Day Exploit Deploys OWAReaper Backdoor
Discover how Russian state-backed hackers are exploiting an Exchange OWA zero-day vulnerability to deploy the OWAReaper backdoor and target western organizations. Continue reading
Chaos Ransomware Delivered via Microsoft Teams Vishing Campaign
A Sophos threat alert reveals that the STAC4749 threat group is using Microsoft Teams vishing to distribute Chaos ransomware and exfiltrate data. Continue reading
QR Code Phishing Campaign UAT-11764 Bypasses Security Gateways
Cisco Talos warns of a persistent QR code phishing campaign by UAT-11764 that evades email gateways and targets Microsoft 365 environments. Continue reading