Huntress found attackers using a fake Custom GPT to funnel victims into a ClickFix malware chain.
Three August lures ended in rogue ScreenConnect clients that spread a four-stage VBScript chain to every new host.
Huntress says an Akira affiliate rebooted a victim into Safe Mode to kill EDR, then the encryptor crashed on the…
Huntress documents a macOS ClickFix stealer that can drain crypto wallets and keychains.
Huntress found attackers using Oracle's own Java engine to compile malware directly inside a database.
Automated scans across the internet find exposed RDP ports on port 3389, giving attackers direct access to business networks without…