JS.MonoGlyphRAT: Stealthy New Malware Hidden in Fake Purchase Orders Targets US Enterprises
A previously unknown remote access trojan called JS.MonoGlyphRAT is spreading through US businesses disguised as routine purchase orders and business quotes. It evades all major antivirus tools by...
Grandoreiro Banking Trojan Returns: Targeting Portuguese Banks and Latin American Companies With Dual Campaigns
The long-running Grandoreiro banking trojan has resurfaced with two active campaigns — one using DLL Side-Loading via cloud infrastructure and another via obfuscated VBS scripts — targeting over...
CORDIAL SPIDER and SNARKY SPIDER Deploy AiTM Pages to Breach SharePoint, HubSpot, and Google Workspace
Two threat groups are deploying adversary-in-the-middle phishing pages combined with voice phishing to bypass MFA and hijack enterprise SaaS sessions. Operating entirely within trusted cloud environments, the campaigns...
Microsoft’s April 2026 Update Adds New RDP Security Warnings to Protect Against Phishing via .rdp Files
Microsoft's April 2026 Patch Tuesday introduces new multi-layer warning dialogs in Windows Remote Desktop Connection, designed to protect users from phishing attacks that weaponize .rdp files — a...
Booking.com Data Breach Exposes Customer Reservation Details, Raising Phishing Risk for Travellers
Booking.com has notified customers of a data breach that exposed names, addresses, email addresses, phone numbers, and full reservation details. While payment data was not compromised, security experts...
Booking.com Confirms Data Breach: Reservation Data and Personal Details of Customers Exposed
Booking.com has confirmed hackers accessed customer reservation data including names, addresses, phone numbers, and booking details. Security experts warn the exposed information enables highly targeted phishing attacks against...
A Sophisticated New Threat: FvncBot Strikes Again
A dangerous new banking malware called FvncBot is targeting unsuspecting users of Android devices, leveraging sophisticated techniques to steal sensitive financial information. First observed in late November 2025,...
Evilginx: A Sophisticated Phishing Toolkit Undermining MFA
Advanced phishing tactics utilizing a sophisticated tool known as Evilginx are becoming increasingly common, raising serious concerns for security professionals and users alike. This attack vector has seen...