Cyber CrimeNewSupply Chain Breach Hits Jscrambler NPM Package Integrity
Compromised publishing credentials allowed attackers to inject malicious binaries into widely used Jscrambler NPM versions.
> Search
22 results for “malware”
Cyber CrimeNew
Cyber CrimeNewU.S. Targets VPN Infrastructure Enabling Global Ransomware Campaigns
Federal authorities have sanctioned a specialized VPN provider and a malware cryptor vendor to disrupt ransomware supply chains.
SecuritySupply Chain Breach Targets Jscrambler Dependency Pipeline
A malicious npm package injection forced a swift cleanup, highlighting the persistent dangers of compromised build environments.
SecurityGigaWiper: The Modular Threat Merging Espionage With Total Destruction
Microsoft identifies a sophisticated new backdoor, GigaWiper, which stitches together existing malware to facilitate targeted data destruction.
SecurityCrashStealer Malware Evades MacOS Defenses via Signed Notarization
A sophisticated new C++ information stealer leverages legitimate Apple developer IDs to bypass Gatekeeper and harvest user credentials.
SecurityInfrastructure Paralysis at Japan's Leading Taxi Operator
Nihon Kotsu has taken critical systems offline following a security breach that disrupted dispatch and reservation capabilities.
SecurityGigaWiper Convergence: A New Era of Modular Destructive Backdoors
Microsoft identifies a sophisticated new malware strain that fuses espionage and permanent data destruction into a single, unified tool.
Cyber CrimeTravel Sector Under Siege as TA558 Pivots Toward Stealthy Payloads
Threat actors are weaponizing reservation-themed emails with container files to bypass modern Microsoft Office security protections.
Cyber CrimeDisrupting the Digital Assembly Line: A Strike Against Cybercrime
International authorities and private tech firms have dismantled critical infrastructure fueling the Amadey and StealC malware networks.
SecurityCrashStealer Malware Mimics Apple Tools to Exfiltrate Keychain Data
A newly identified macOS infostealer leverages Apple-notarized installers to bypass system security and harvest sensitive user data.
SecurityAI 'Vibe Coding' Erases Technical Barriers for Aspiring Cybercriminals
New research highlights how generative AI enables low-skilled attackers to craft custom, evasive malware payloads on demand.
Cyber CrimeDormant Infostealer Infection Turns World Cup Spat Into Data Breach
A decade-long developer's device, infected nearly a year ago, likely provided the gateway for a breach of the Argentine Football Association.
SecurityPamStealer Malware Signals a More Sophisticated Era for macOS
A newly identified infostealer employs unconventional local authentication checks and Rust-based binaries to bypass standard defenses.
SecurityGigaWiper: A Swiss Army Knife of Digital Destruction
Microsoft identifies a sophisticated new Windows backdoor that merges multiple ransomware and data-wiping tools into one modular threat.
Cyber CrimeThe Rise of Vibe-Coded Malware: AI Accelerating Intrusion Playbooks
Threat actors are leveraging AI to refine and accelerate traditional attack chains, lowering the barrier to entry for complex operations.
SecurityDefender Patch Flaw Risks Total Disk Saturation via Exploit
A fix for a critical zero-day vulnerability inadvertently introduces a secondary risk that could lead to complete hard drive exhaustion.
SecurityHow RedHook Turns Android's Developer Settings Into an Open Backdoor
A newly upgraded RedHook Android malware variant exploits wireless debugging settings to gain high-level shell privileges without root.
SecurityWhy the FBI Takedown of NetNut Threatens the Cybercrime Pipeline
Law enforcement and tech giants dismantle a massive residential proxy network operating right inside consumer living rooms.
SecurityThe Geopolitical Crosshairs Targeting Pakistani Police Data
Sustained cyber espionage campaigns weaponize local law enforcement systems to harvest sensitive citizen data and security records.
SecurityWhen Build Tools Turn Hostile: Inside the jscrambler Poisoning
A compromised jscrambler package release highlights how modern software pipelines are weaponized to harvest developer secrets.
SecurityWhen Trust is Weaponized: Inside the Injective Labs SDK Compromise
A compromised developer account on GitHub allowed attackers to inject silent credential-stealing malware into a popular Web3 ecosystem.
Cyber CrimeRansomware’s Stealthy Ascent: Microsoft-Signed Driver Bypasses Defenses
GodDamn ransomware now exploits PoisonX, a Microsoft-signed kernel driver, to disable endpoint security, marking a critical escalation in evasion tactics.