The Hacker News

New VVS Stealer Malware Targets Discord Accounts via Obfuscated Python Code

VVS Stealer is a Python-based malware sold on Telegram that steals Discord tokens, browser data, and credentials using heavy ...

Browser extension malware infected 8.8M users in DarkSpectre attack

Browser extensions turned malicious after years of legitimate operation in DarkSpectre campaign affecting millions. The ...

Fake Windows BSODs check in at Europe's hotels to con staff into running malware

Russia-linked hackers are sneaking malware into European hotels and other hospitality outfits by tricking staff into ...

New GlassWorm Malware Wave Targets Macs Through Fake Crypto Wallet Tools

A new wave of the GlassWorm malware is now targeting macOS developers by hiding malicious code inside fake Visual Studio Code ...

Securonix warns of malware campaign targeting hospitality sector

A new report out today from cybersecurity company Securonix Inc. is warning of an ongoing malware campaign targeting the ...

Nasty GlassWorm Malware Pivots From Windows To Target Mac Users

Its researchers have not only uncovered a sprawling spyware campaign, but they're also keeping tabs on the ever-evolving ...

New GlassWorm malware wave targets Macs with trojanized crypto wallets

A fourth wave of the "GlassWorm" campaign is targeting macOS developers with malicious VSCode/OpenVSX extensions that deliver ...

ClickFix attack uses fake Windows BSOD screens to push malware

A new ClickFix social engineering campaign is targeting the hospitality sector in Europe, using fake Windows Blue Screen of ...
Infosecurity Magazine

Hospitality Sector Hit By PHALT#BLYX ClickFix Malware Campaign

Multi-stage malware campaign targets hospitality organizations using social engineering and abuse of MSBuild.exe ...
Amazon S3 on MSN

The "Gayfemboy" malware explained clearly

A new strain of botnet malware is targeting vulnerable routers from major manufacturers, using crude internet humor as part of its code while quietly enlisting devices into DDoS and cryptomining ...

Malware bypassed macOS Gatekeeper by abusing Apple's notarization proccess

A new variant of the MacSync Stealer uses a code-signed Swift application to get around Apple's macOS Gatekeeper protections.
SecurityWeek

Infostealer Malware Delivered in EmEditor Supply Chain Attack

The text and code editing tool EmEditor was targeted in a supply chain attack that resulted in the distribution of ...