PATCHCORD backdoor rides fake VPN installers into Afghan telecoms

Fake VPN installers are delivering a new backdoor to Afghan telecoms and South Asian infrastructure, with ties to APT36.

The Latest

Breaking News and Alerts

GhostDesk malware rides fake CCleaner installers into Chrome

Malwarebytes finds a lookalike CCleaner site pushing a Chrome credential stealer.

Spotlight

Cybersecurity Profiles and Stories

ZeroBytes peddles 2M French taxpayer records on hacking forum

France's DGFiP confirms a June intrusion that exposed taxpayer data.

Vishing entry behind 1.6M-account RingCentral data leak

ShinyHunters dumped account data after RingCentral refused an extortion demand.

AmnesiaStealer trades keychain dumps for live macOS browser hijacks

Jamf Threat Labs details a three-stage Rust stealer that harvests macOS credentials and gives operators live, hidden control of the victim's browser.

Free 15.5 GB dump puts 7.3 million Chess.com accounts at risk

A free archive with 7.3 million Chess.com records looks like large-scale scraping, though one internal-facing detail needs explaining.

Features

Research and Thought Leadership