More

    Exploits

    10 Malicious npm Packages with Install Auto Run and Multi Stage Credential Harvesters

    Socket’s Threat Research Team has exposed a sophisticated supply chain attack involving 10 malicious npm packages that automatically deploy multi-stage credential theft operations upon...

    Npm Malware Uses Invisible Dependencies to Infect Dozens of Packages

    An ongoing npm credential harvesting campaign operating since August 2025 has been discovered by researchers at Koi Security. The malware, dubbed PhantomRaven by the researchers,...

    New Android malware lags like a human to steal money from your phone

    Rita El Khoury / Android Authority TL;DR A new Android banking Trojan called Herodotus mimics human behavior, such as random keystroke delays, to evade detection tools. The...

    Gmail breach panic? It’s a misunderstanding, not a hack

    After a misinterpretation of an interview with a security researcher, several media outlets hinted at a major Gmail breach. Reporters claimed the incident took place...

    New Beast Ransomware Expands Through Network by Scanning Active SMB Ports

    The Beast ransomware group, which emerged as a Ransomware-as-a-Service (RaaS) platform in February 2025 and evolved from the Monster ransomware strain, continues to expand...

    New Atroposia RAT Surfaces on Dark Web

    A new remote access trojan (RAT) dubbed Atroposia has been discovered by security researchers at Varonis. The RAT uses encrypted command channels, hidden remote access,...

    Atroposia malware kit lowers the bar for cybercrime — and raises the stakes for enterprise defenders

    Researchers have discovered an inexpensive, full-featured malware-as-a-service kit combining vulnerability scanning, covert access, and DNS hijacking. 

    Gunra Ransomware Targets Windows and Linux with Dual Encryption

    The cybersecurity landscape continues to face persistent threats from emerging ransomware groups, with Gunra representing a significant concern since its emergence in April 2025. This...

    CEO of spyware maker Memento Labs confirms one of its government customers was caught using its malware

    On Monday, researchers at cybersecurity giant Kaspersky published a report identifying a new spyware called Dante that they say targeted Windows victims in Russia...

    Latest articles