GlassWorm Escalates: 73 New “Sleeper” Extensions Discovered on Open VSX Marketplace
Aikido Security has identified 73 new GlassWorm "sleeper" extensions on the Open VSX marketplace, marking a dangerous escalation in a supply chain campaign targeting developers through hidden malicious...
A Silent Killer Sneaking into Your Code: New Campaign Targets VS Code Developers
From seemingly innocuous extensions to stealthy trojans, the threat landscape for developers is evolving. While the world continues to grapple with the ever-shifting tide of cybersecurity threats, a...
A Sneaky New Threat: Microsoft Teams Calls and QuickAssist Lead to Stealthy Malware Attacks
From phishing calls to fileless malware, the evolution of cyberattacks is alarmingly rapid. The latest threat employs a sophisticated blend of social engineering and technical prowess to bypass...
The Kitten Project: A New Era of Coordinated Hacktivism
The cyber-world has always been a stage for activism and protest, but the rise of hacktivism offers something different – a blend of technical expertise and political expression....
The Sophisticated ClickFix Sting: How Calisto Disguises Itself to Steal Credentials
Calisto, a cyberespionage campaign attributed to the Russian FSB’s Center 18 for Information Security (military unit 64829), has been making waves in the cybersecurity community. This group has...
A Critical Patch for Vulnerable Next.js: New Scanner Unveils Hidden Attacks
With the rise of Serverless functions, static site generators like Next.js have become ubiquitous in web development, streamlining functionality and boosting speed. However, while these frameworks offer undeniable...
K.G.B. RAT Strikes Again: A Case Study in Undetectable Malware Distribution
The underground cybercriminal ecosystem has witnessed a worrisome development – the rise of a highly sophisticated remote access trojan (RAT) known as K.G.B. RAT. This weaponized software, now...
Arkanix: A Sneaky New Malware Stealing from Homes and Small Offices
New malware is emerging with a distinct focus on stealing sensitive information from home users and small businesses: the Arkanix stealer. This advanced tool leverages common vulnerabilities to...