A new malicious campaign mixes the ClickFix method with fake CAPTCHA and a signed Microsoft Application Virtualization (App-V ...

ClickFix uses fake CAPTCHAs and a signed Microsoft App-V script to deploy Amatera stealer on enterprise Windows systems.

DEAD#VAX campaign delivers AsyncRAT via IPFS-hosted VHD phishing files, using fileless memory injection and obfuscated scripts to evade detection.

Get your fresh install settled quickly with these 4 PowerShell scripts ...

How modern infostealers target macOS systems, leverage Python‑based stealers, and abuse trusted platforms and utilities to ...

After Microsoft, Google, and a long fight for automation, Jeffrey Snover hangs up his keyboard A really important window is ...

Launch multiple apps at once, clear temporary files, and more.

Two malware campaigns weaponize open-source software to target executives and cloud systems, combining social engineering ...

ESET researchers present technical details on a recent data destruction incident affecting a company in Poland’s energy sector.

The modular Windows RAT uses in-memory execution and live operator control to maintain persistence and exfiltrate sensitive ...

A malvertising campaign is using a fake ad-blocking Chrome and Edge extension named NexShield that intentionally crashes the ...

This is Part 2 of our two-part technical analysis on the Gopher Strike and Sheet Attack campaigns. For details on the Gopher Strike campaign, go to Part 1.IntroductionIn September 2025, Zscaler ...