Category Archives: Threat Alerts
PHANTOMPULSE Trojan Weaponizes Obsidian to Target Financial Firms
Security researchers have identified the PHANTOMPULSE Trojan, a sophisticated piece of malware that weaponizes the Obsidian note-taking app through social engineering. Continue reading
ATHR AI-Vishing: Automated TOAD Platform Targets Global Services
The ATHR AI-Vishing platform marks a shift in cybercrime, using automated AI voice agents and real-time credential harvesting to impersonate major financial institutions. Continue reading
Double-Extortion Ransomware: NBLock and Gunra Strains Target Global Entities
Researchers warn of new double-extortion ransomware strains NBLock and Gunra, which exploit administrative identities and software vulnerabilities to bypass traditional security defenses. Continue reading
Railroad Infrastructure Cyber Threat Warning Issued for U.S. Rail Systems
The Federal Railroad Administration has issued a warning regarding a credible railroad infrastructure cyber threat from Iranian actors targeting critical industrial control devices. Continue reading
AI Deepfake Scams: Federal Alerts Issued Over Voice Cloning and Investment Fraud
Consumer protection agencies are warning of a significant rise in AI deepfake scams involving manipulated celebrity videos and sophisticated voice cloning technology to defraud victims. Continue reading
n8n Phishing Campaigns Weaponize AI Workflow Platform
New n8n phishing campaigns are exploiting the platform’s trusted infrastructure and webhooks to bypass email security filters and deploy malicious RMM tools. Continue reading
Dragon Boss Malware: Mass Antivirus Disablement via Signed Payloads
The Dragon Boss malware operation has disabled antivirus software on over 23,000 endpoints by utilizing digitally signed payloads to bypass security layers. Continue reading
ClickFix Social Engineering: Industrialized Tactics Bypassing Browser Sandboxes
Industrialized ClickFix social engineering tactics are bypassing modern browser sandboxes by tricking users into executing malicious PowerShell commands manually. Continue reading
Ledger Live Fraud: Malicious App Drains $9.5 Million
A sophisticated Ledger Live fraud campaign has resulted in the theft of $9.5 million after a malicious application bypassed App Store security measures to target cryptocurrency users. Continue reading