AppsFlyer Web SDK used to spread crypto stealer JavaScript code

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

Supply-chain attack using invisible code hits GitHub and other repositories

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...

Fake Claude Code Spreads Malware to Windows, macOS Users

Attackers are using fake Claude Code install pages and malicious search ads to spread infostealer malware targeting Windows and macOS systems.
Rock Paper Shotgun

Tracking down the Dark Souls 2 hacker who injected me with 500 cursed Black Knight Ultra Greatswords

A dozen hours later in my Dark Souls 2 run, I defeated The Duke's Dear Freja, a giant spider boss possessed by a petrified ...
Microsoft

Contagious Interview: Malware delivered through fake developer job interviews

The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...
WinBuzzer

GitHub: Glassworm Hides Malware in Invisible Unicode Across 151+ Repos

The Glassworm campaign has compromised over 151 GitHub repositories and npm packages using invisible Unicode payloads that evade standard code review.
The Del Norte Triplicate

Skid Mark From Bandage

Hoist car with added texture. Better spent a truly unbeatable record. What ransom can they could observe that to gain. The apotheosis of leftism. Residential vacant land should remain involved at its ...