Hackers are using WhatsApp messages to deliver malware to Windows PCs, exploiting user trust and attachments to trigger ...
A malware campaign uses WhatsApp messages to deliver VBS scripts that initiate a multi-stage infection chain. The attack ...
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...
The attack chain relies on delayed execution, trusted Windows utilities, and legitimate hosting services to maintain ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
The activity begins with the attackers distributing malicious VBS files via WhatsApp messages that, when executed, create ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
A new ClickFix attack that leverages a Nuitka loader targets macOS users with the Python-based Infiniti Stealer malware.
A new cryptojacking malware campaign is targeting Docker environments using a novel mining technique, according to researchers from Darktrace and Cado Security Labs. The campaign demonstrates a trend ...
ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be ...