Category Archives: Threat Alerts
ClickLock macOS Stealer: New Malware Uses Extortion and Kill Loops
Discover how the new ClickLock macOS Stealer uses ClickFix lures and disruptive kill loops to compromise systems and extort user credentials worldwide. Continue reading
Starland RAT Malware: Russian Hackers Exploit Trojanized Installers
Discover how Russian hackers are distributing the novel Starland RAT through trojanized Zoom and Webex installers in a sophisticated cyber campaign. Continue reading
SonicWall SMA1000 Zero-Day Chain Exploited in Ransomware Campaigns
Active exploitation of the SonicWall SMA1000 series is underway as threat actors use a zero-day chain to bypass security and deploy ransomware. Learn how to patch now. Continue reading
FaceTime Scams Target Bank Accounts: How to Protect Yourself
A surge in sophisticated FaceTime scams is threatening bank accounts; learn how cybercriminals use screen sharing to steal your credentials and how to stay safe. Continue reading
SeasonalInvite Phishing Campaign Exposes Risks of Abused RMM Tools
Learn how the SeasonalInvite phishing campaign leverages legitimate RMM software to bypass security controls and gain unauthorized remote access to corporate systems. Continue reading
CrashStealer: Sophisticated macOS Malware Impersonates Apple CrashReporter
Discover how the new CrashStealer macOS malware exploits developer signatures and native C++ code to bypass Gatekeeper and steal sensitive user credentials. Continue reading
Ghostcommit Supply-Chain Attack Uses AI Prompt Injection to Steal Secrets
Researchers have uncovered the Ghostcommit supply-chain attack, a novel method using image-based prompt injection to bypass AI reviewers and exfiltrate repository data. Continue reading
WP-SHELLSTORM: Mass Exploitation Campaign Targets WordPress and Joomla
Discover how the WP-SHELLSTORM campaign exploits thousands of sites using automated vulnerabilities. Learn how to secure your infrastructure against these webshell attacks. Continue reading
Ghost Phishing: New EvilTokens Campaign Bypasses MFA Security
Discover how the sophisticated ghost phishing campaign utilizes EvilTokens and OAuth exploits to bypass multi-factor authentication and compromise Microsoft 365 accounts. Continue reading