We found fake “verify you are human” pages on hacked WordPress sites that trick Windows users into installing the Vidar ...
The state-sponsored hackers deployed custom tools and stayed dormant in the compromised environments for months.
ClickFix campaigns spread MacSync macOS infostealer via malicious Terminal commands since Nov 2025, targeting AI tool users ...
New ClickFix variant maps WebDAV drive to run trojanized WorkFlowy app, enabling stealth C2 beacon and payload delivery.
A fake $TEMU crypto airdrop uses the ClickFix trick to make victims run malware themselves and quietly installs a remote-access backdoor.
A new malware strain dubbed Slopoly, likely created using generative AI tools, allowed a threat actor to remain on a compromised server for more than a week and steal data in an Interlock ransomware ...
Attackers are using fake Claude Code install pages and malicious search ads to spread infostealer malware targeting Windows ...
A new ClickFix attack variant uses fake CAPTCHA pages instructing victims to paste and execute malicious commands in Windows Terminal.
DuckyScript is a simple scripting language for automating keyboard input. Originally created for the USB Rubber Ducky, it's now used in various keystroke injection tools. Scripts execute line-by-line, ...