Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans
Source: https://thehackernews.com/2025/09/android-droppers-now-deliver-sms.html
When Browsers Become the Attack Surface: Rethinking Security for Scattered Spider
Source: https://thehackernews.com/2025/09/when-browsers-become-attack-surface.html
ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics
Source: https://thehackernews.com/2025/09/scarcruft-uses-rokrat-malware-in.html
Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling
Source: https://thehackernews.com/2025/08/attackers-abuse-velociraptor-forensic.html
TamperedChef Malware Disguised as Fake PDF Editors Steals Credentials and Cookies
Source: https://thehackernews.com/2025/08/tamperedchef-malware-disguised-as-fake.html
Feds Seize $6.4M VerifTools Fake-ID Marketplace, but Operators Relaunch on New Domain
Source: https://thehackernews.com/2025/08/feds-seize-64m-veriftools-fake-id.html
Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials
Source: https://thehackernews.com/2025/08/malicious-nx-packages-in-s1ngularity.html
Blind Eagle’s Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra
Source: https://thehackernews.com/2025/08/blind-eagles-five-clusters-target.html
Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data
Source: https://thehackernews.com/2025/08/salesloft-oauth-breach-via-drift-ai.html
New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station
Source: https://thehackernews.com/2025/08/new-sni5gect-attack-crashes-phones-and.html
ShadowCaptcha Exploits WordPress Sites to Spread Ransomware, Info Stealers, and Crypto Miners
Source: https://thehackernews.com/2025/08/shadowcaptcha-exploits-wordpress-sites.html
MixShell Malware Delivered via Contact Forms Targets U.S. Supply Chain Manufacturers
Source: https://thehackernews.com/2025/08/mixshell-malware-delivered-via-contact.html
CISA Adds Three Exploited Vulnerabilities to KEV Catalog Affecting Citrix and Git
Source: https://thehackernews.com/2025/08/cisa-adds-three-exploited.html