Die MALFEX-Kampagne nutzt ein Windows-Addon und dllhost.exe; Umfang und Zahl möglicher Downloads sind bislang ungeklärt.
The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into ...
A malicious WhatsApp ZIP is deploying VulcanRAT207.A on Windows, using privilege escalation and persistence techniques to ...
A newly documented Windows intrusion chain uses WhatsApp-delivered financial lures to deploy VulcanRAT207.A, a WebSocket ...
Hackers use malicious WhatsApp attachments to deploy VulcanRAT, gaining SYSTEM-level access to steal data and control Windows ...
Cisco Talos details UAT-11587, a China-linked group using the Antino backdoor and Microsoft 365 as cover to spy on Asian governments.
A malicious npm package called imgdecode hides malware inside image files hosted on GitHub. Security researchers at SafeDep ...
Autonomous AI malware CLOSEDQUORUM lets DeepSeek, Qwen, Mistral, and Gemini vote on attack decisions with no human operator, Cisco Talos disclosed September 22. The four-model plurality structure ...
UTA0565 exploited a Chrome-Windows zero-day chain through fake websites to deploy CLEANGULP malware against Asian government entities.
A new Windows malware named ClosedQuorum uses Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously determine the actions to take during post-compromise stages of an attack.
A single piece of attack code, quietly built to chain three unpatched flaws in Chrome and Windows, has ended up in the hands of at least four separate hacking crews within days of each other.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results