Armorsteal uses Python, PyArmor, scheduled tasks, credential theft, keylogging, and crypto mining to compromise Windows systems ...
Storm-3358 uses the ARTEX agentic AI framework to automate scanning, exploitation, lateral movement, RAT deployment, and data exfiltration ...
SolanaCry abuses malicious GitHub repositories and AI coding agents to deploy NetSupport RAT, gain remote access, and steal ...
A ClickFix campaign targets Windows and macOS users with fake Cloudflare verification pages, malicious domains, and deceptive command prompts ...
ESET tracks China, Iran, North Korea, Russia, and Belarus-aligned APT activity, supply-chain attacks, new malware, and AI-assisted techniques ...
Unauthorized AI relays reroute Codex and Claude Code traffic, disable sandboxing, and expose prompts, files, credentials, and API secrets ...
Google has released Chrome 153 with a fix for another zero-day vulnerability already being exploited in real-world attacks. Tracked as CVE-2026-87491, the flaw is an out-of-bounds write vulnerability ...
Attack Narrative & Commands: The adversary seeks to automate the disruption of VMware vCenter to prepare for a mass ransomware deployment. They utilize a specialized PowerShell script designed to ...
Threat actor UTA0576 is exploiting a chain of vulnerabilities in Ivanti Connect Secure (ICS) appliances to achieve unauthenticated root access. The attack chain involves an authentication bypass ...
As the effects of CVE-2024-1086 continue to unfold, a new vulnerability has emerged, posing a menace to cyber defenders. Google has flagged a critical zero-click flaw in the Android System component ...
A Chinese APT group called Silver Fox conducts a tax‑themed phishing campaign against Indian entities. The initial email contains a PDF that directs victims to a malicious domain and triggers a ...
Attack Narrative & Commands: The adversary has gained initial access to the victim’s workstation. To maintain a stealthy presence and facilitate command-and-control (C2) communication, they need a ...