Tag: Malware
Hijacked HBO Max account floods Reddit with ClickFix ads
A verified HBO Max Reddit account pushed 108 malicious ads in 48 hours, part of a broader operation spreading infostealers.
Chinese spies pair a Chrome zero-day with a fake Gemini extension
A recently patched Chrome and Windows exploit chain is now delivering two separate espionage toolsets against NGO targets.
Fake Cloudflare page on Indian IT agency site pushed terminal commands
A government-linked Indian IT portal served a fake Cloudflare check that tried to get visitors to run a copied command.
Stolen AI session tokens let thieves skip the login step
Okta found thousands of live AI session tokens in a stealer log, letting thieves replay their way into paid tools.
Bookmarks add-on hides a backdoor that crosses the browser sandbox
SOCRadar details PEEP, a post-compromise toolkit that rides a fake bookmarks extension from the browser out to host-level command execution.
BraZetsu turns hacked Windows machines into inventory for access bazaar
Group-IB details BraZetsu, a Python malware framework that stocks a paid marketplace with hacked Windows hosts.
Signed node.exe is latest cover for malware delivery, Symantec finds
Symantec documents attackers abusing signed node.exe to run JavaScript payloads in intrusions since February.
Russian man extradited over Excel malware sent to 80,000 freelancers
A Russian man is extradited to face charges over Excel macro malware sent to roughly 80,000 freelancers.