Arkanix Stealer emerged as a short-lived information-stealing malware operation promoted on dark web forums in late 2025. The malware was likely developed as an AI-assisted experiment, indicating a growing trend…
Continue readingThe article investigates the beneficiaries of the Kimwolf botnet, which infected over two million devices, primarily unofficial Android TV streaming boxes, by early 2026. It explores digital evidence linking the…
Continue readingThe Kimwolf botnet, a newly identified Internet-of-Things threat, has infected over 2 million devices, primarily targeting IoT systems. It forces compromised devices to engage in large-scale distributed denial-of-service attacks and…
Continue readingCybersecurity researchers have uncovered the ClickFix campaign, a sophisticated operation that leverages compromised legitimate websites across various industries and geographies to deploy the previously undocumented MIMICRAT malware, also known as…
Continue readingThe article reveals that the operators of the Kimwolf botnet, a disruptive network with over 2 million infected devices, have claimed to compromise the control panel for Badbox 2.0, a…
Continue readingCybersecurity researchers from Acronis Threat Research Unit (TRU) have identified a new campaign named CRESCENTHARVEST, which targets supporters of Iran’s ongoing protests. The campaign, active since at least January 9,…
Continue readingNotepad++ has addressed a critical security vulnerability in its update mechanism that was exploited by an advanced threat actor from China to deliver targeted malware. The issue involved hijacking the…
Continue readingCybersecurity researchers have revealed that AI assistants with web browsing capabilities, such as Microsoft Copilot and xAI Grok, can be exploited as command-and-control (C2) proxies for malware. This technique allows…
Continue readingCybersecurity researchers have identified the first known malicious Microsoft Outlook add-in in active use, marking a significant development in supply chain attacks. According to Koi Security, an attacker exploited a…
Continue readingCybersecurity researchers have identified a new malicious campaign targeting the npm and PyPI ecosystems, attributed to the North Korea-linked Lazarus Group. The campaign, codenamed ‘graphalgo’ after the first package published…
Continue reading