Collaborate Disseminate
eSentire TRU analyses the new DarkCloud V4.2 infostealer, rewritten in VB6. Find out how the malware steals browser data, crypto, and contacts via targeted phishing. Continue reading DarkCloud Infostealer Relaunched to Grab Credentials, Crypto and Contacts
Hackers are sending fake invoice emails with malicious Office files that install the XWorm RAT on Windows systems, allowing full remote access and data theft. Learn how the shellcode and process injection are used to steal data, and how to stay safe fr… Continue reading Hackers Use Fake Invoices to Spread XWorm RAT via Office Files
Bitdefender warns that the TradingView Premium ad scam now targets Google ads and YouTube, hijacking verified channels to spread spyware. Continue reading Google Ads Used to Spread Trojan Disguised as TradingView Premium
FortiGuard Labs exposes a high-severity phishing campaign impersonating the National Police of Ukraine to deliver Amatera Stealer (data theft) and PureMiner (cryptojacking) to Windows PCs. Continue reading Fake Ukraine Police Notices Spread New Amatera Stealer and PureMiner
New Lone None Stealer uses Telegram C2 and DLL side-loading to grab passwords, credit cards, and crypto. Find out how to spot this highly evasive phishing scam. Continue reading Vietnamese Hackers Use Fake Copyright Notices to Spread Lone None Stealer
Cybersecurity firm Noma Security reveals ForcedLeak, a critical flaw in Salesforce Agentforce that allowed data theft. Learn what companies need to do now to secure AI agents. Continue reading ForcedLeak Flaw in Salesforce Agentforce AI Agent Exposed CRM Data
Urgent warning for Fortra GoAnywhere MFT users. A CVSS 10.0 deserialization vulnerability (CVE-2025-10035) in the License Servlet allows command injection. Patch to v7.8.4 immediately to prevent system takeover. Continue reading Critical CVSS 10 Flaw in GoAnywhere File Transfer Threatens 20,000 Systems
China-backed UNC5221 targets US legal and tech firms by deploying BRICKSTORM malware on neglected VMware and Linux/BSD appliances, Google’s Mandiant reports. Continue reading China-Linked Hackers Hit US Tech Firms with BRICKSTORM Malware
Darktrace researchers have uncovered ShadowV2, a new botnet that operates as a DDoS-for-hire service by infecting misconfigured Docker containers on AWS cloud servers. Continue reading ShadowV2 Botnet Uses Misconfigured AWS Docker for DDoS-For-Hire Service
The FBI is warning internet users about fake versions of its official IC3 cybercrime reporting website. Learn how to spot these ‘spoofed’ sites, avoid scams where criminals impersonate agents, and protect your personal information by following the FBI’… Continue reading FBI Warns of Fake IC3 Websites Designed to Steal Personal Data