Fake Software Installers Are Quietly Disarming Microsoft Defender in New Silver Fox Campaign
A Silver Fox-linked campaign is distributing counterfeit installers for brands like Razer, Microsoft Edge, and Kaspersky that use SYSTEM-level scheduled tasks to strip Microsoft Defender protections and delete...
ValleyRAT Campaign Turns Fake Adware Installers Into a Persistent Espionage Backdoor
A ValleyRAT campaign is disguising its infection chain as adware and familiar software installers, with most observed victims in China and India. The backdoor uses DLL sideloading and...
Malvertising Has Moved Past the Ad Itself: Why the Real Threat Now Lives in the Redirect Chain
New moderation data shows malicious advertising is increasingly indistinguishable from a legitimate ad at first glance, with the real payload hidden several redirects deep behind cloaking, disposable domains,...
Infostealers Target Claude Sessions, Letting Attackers Bypass MFA and Drain Paid Accounts
Attackers are stealing authenticated Claude browser sessions and abusing malicious ads and files to compromise users. Anthropic has invalidated affected sessions and refunded confirmed charges, but victims must...
Core Werewolf Deploys Custom CoreRAT Against Russian Defense Targets
The Core Werewolf threat group is using a newly documented Windows remote access trojan in campaigns aimed at Russian public-sector and defense organizations. Telegram lures and forged official...
ToxNetV2 Botnet Adds AI-Guided Commands to Linux Attack Operations
Researchers have analyzed a peer-to-peer Linux botnet whose controller consults an NVIDIA-hosted AI model to propose operational actions. Human approval still gates the most consequential commands, but the...
Fake Adobe Reader Site Powers a New Malware-as-a-Service Platform Targeting Windows Users
Researchers have uncovered a live malware-as-a-service operation hiding behind a convincing fake Adobe Acrobat Reader site, using a WebDAV trick and a disguised batch file to install information-stealing...
New Espionage Campaign ‘SilkParasite’ Hits Central Asian Governments With Five Undocumented Malware Tools
Researchers have uncovered SilkParasite, a cyberespionage operation using spear-phishing and five previously unseen malware families to target government bodies across Central Asia. The campaign favors cloud-based command channels...