Kaspersky researchers analyze GOFFEE’s campaign in H2 2024: the updated infection scheme, new PowerModul implant, switch to a binary Mythic agent.
Group uses updated PowerShell version of its GammaSteel malware in attack.
Sensata Technologies (known as Sensata) has suffered a ransomware attack last weekend that encrypted parts of the company network and disrupted operations. [...]
A new AI-powered framework dubbed “AkiraBot” has successfully spammed 80,000 websites since September 2024
2025-04-01 • ANY.RUN • Adhikara Open article on Malpedia
2025-04-02 • ASEC • ASEC • js.beavertail Open article on Malpedia
2025-04-03 • ThreatMon • Aziz Kaplan, ThreatMon, ThreatMon Malware Research Team Open article on Malpedia
2025-04-04 • Youtube (greenplan) • greenplan Open article on Malpedia
Here’s how to avoid being hit by fraudulent websites that scammers can catapult directly to the top of your search results
Flipper Devices, the company behind the popular Flipper Zero, has launched an open-source productivity tool called Busy Bar, designed to help reduce distractions for people with ADHD. [...]
Police have made more arrests in the ongoing Operation Endgame, cracking down on malware customers
2025-04-02 • ANALYST1 • analyst1 • elf.blackbasta, win.blackbasta Open article on Malpedia
2025-04-08 • Trustwave • Nikita Kazymirskyi, Serhii Melnyk • elf.blackbasta, win.blackbasta Open article on Malpedia
Read SentinelOne's response to President Donald Trump's Executive Order dated April 9, 2025 here.
OpenAI is preparing to launch as many as three new AI models, possibly called "o4-mini", "o4-mini-high" and "o3". [...]
The initial intrusion vector was an SMS phishing campaign that spoofed internal IT notifications to harvest user credentials and MFA codes. Atlas Lion then enrolled a VM from their Azure tenant...
Cyber threats are becoming increasingly sophisticated and frequent, and the protection of critical infrastructure has never been more important. Australia... The post SOCI Act: Strengthening...
The executive order also eliminates security clearances for SentinelOne employees. The post Trump signs order stripping Chris Krebs of security clearance appeared first on CyberScoop.
Sensata Technologies, a U.S.-based manufacturer or industrial technologies with operations in about a dozen countries, told federal regulators that a recent ransomware attack disrupted key systems.
A hacker using the alias “Satanic” claims a WooCommerce data breach via a third party, selling data on…
One CVE was used against “a small number of targets.” Windows 10 users needed to wait a little bit for their patches.
The U.S. Treasury Department’s Office of the Comptroller of the Currency (OCC) has notified Congress of “a major information security incident” involving threat actor access to about 150,000...
You may not be the intended target of these malicious apps masquerading as legitimate programs - but you can still be their victim.
Cybercriminals constantly evolve their threat tactics and strategies, using the latest technologies available to them to bypass traditional email security solutions. Gain insight into the topics...
Lovable, a generative artificial intelligence (AI) powered platform that allows for creating full-stack web applications using text-based prompts, has been found to be the most susceptible to...
Company didn't notice its chatbot was being abused for (at least) 4 months.
A new survey from Malwarebytes reveals that most people are worried about their personal data being misused by corporations. But it doesn't have to be a losing battle. Here's how to better protect...
Copilot on Windows 11 is testing OS-level integration that would allow you to share your favourite apps' screen with Copilot. [...]
Microsoft warns CVE-2025-29824 lets attackers with user access escalate privileges to deploy ransomware via a flaw in Windows CLFS.
The list of 1,223 victims in 51 countries hints at the “true scale of the spyware problem,” per one researcher.