Global Salt Typhoon hacking campaigns linked to Chinese tech firms
Source: https://www.bleepingcomputer.com/news/security/global-salt-typhoon-hacking-campaigns-linked-to-chinese-tech-firms/
Pakistan-linked APT36 abuses Linux .desktop files to drop custom malware in new campaign
Source: https://securityaffairs.com/181513/apt/pakistan-linked-apt36-abuses-linux-desktop-files-to-drop-custom-malware-in-new-campaign.html
Over 300 entities hit by a variant of Atomic macOS Stealer in recent campaign
Source: https://securityaffairs.com/181441/malware/over-300-entities-hit-by-a-variant-of-atomic-macos-stealer-in-recent-campaign.html
EncryptHub abuses Brave Support in new campaign exploiting MSC EvilTwin flaw
Source: https://securityaffairs.com/181203/cyber-crime/encrypthub-abuses-brave-support-in-new-campaign-exploiting-msc-eviltwin-flaw.html
Booking.com phishing campaign uses sneaky 'ん' character to trick you
Source: https://www.bleepingcomputer.com/news/security/bookingcom-phishing-campaign-uses-sneaky-character-to-trick-you/
Chinese Groups Stole 115 Million US Cards in 16-Month Smishing Campaign
Source: https://hackread.com/chinese-stole-115-million-us-cards-smishing-campaign/
Over 200 Malicious Open Source Packages Traced to Lazarus Campaign
Source: https://www.infosecurity-magazine.com/news/200-malicious-open-source-lazarus/
Deriv security team recently uncovered a macOS malware campaign targeting developers - using a fake Homebrew install script, a malicious Google ad, and a spoofed GitHub page.
Broken down in the blog
Worth a read.
North Korean Hackers Flood npm Registry with XORIndex Malware in Ongoing Attack Campaign
Source: https://thehackernews.com/2025/07/north-korean-hackers-flood-npm-registry.html