Cybercriminals are exploiting Facebook’s advertising platform to lure users into downloading remote access trojan (RAT) malware via counterfeit Kling AI pages, targeting over 22 million potential victims. The campaign uses fake Facebook pages and sponsored ads that mimic the branding of Kling AI, a synthetic media tool launched in June 2024 by Kuaishou Technology. Unsuspecting […]
More than 70 malicious packages targeting JavaScript developers have been uncovered in the npm registry and Visual Studio Code (VS Code) ecosystem, posing a significant threat to software supply chains. According to research, approximately 60 of these were found in the npm package registry, embedded with install-time scripts designed to execute automatically during installation. Once […]
Hackers are leveraging search engine optimization (SEO) poisoning techniques to deceive employees into handing over payroll credentials, according to findings from threat researchers. The campaign, first identified in May 2025 by cybersecurity firm ReliaQuest, targeted an unnamed manufacturing company. Attackers created fake payroll login pages that appeared in Google search results when employees searched for […]
Adidas AG, the German sportswear company, has disclosed a data breach following a cyberattack on one of its customer service providers. The incident resulted in unauthorized access to customer data, though the company did not specify the number of affected individuals or the type of information compromised. The breach was linked to a third-party service […]
Efforts to dismantle the Lumma infostealer operation may not have fully succeeded, according to security industry updates. Despite previous actions targeted at disrupting the malware’s infrastructure, new activity suggests that Lumma remains operational. The infostealer, known for harvesting sensitive user data including credentials and financial information, continues to pose a threat to organizations and individuals. […]
Microsoft has published new research outlining advanced defensive strategies to counter the growing threat of Adversary-in-the-Middle (AiTM) attacks, which are becoming increasingly prevalent in cloud-based enterprise environments. These attacks exploit proxy servers to intercept authentication flows, effectively bypassing multifactor authentication (MFA) through phishing-as-a-service platforms such as Evilginx. High-profile threat groups, including Storm-0485 and Star Blizzard, […]
Microsoft Corp. and CrowdStrike Holdings Inc. have partnered to streamline threat actor identification, addressing a long-standing issue in cybersecurity intelligence: inconsistent naming of malicious groups across vendors. The initiative, announced Monday, introduces a shared mapping tool that links adversary identifiers without enforcing a universal naming standard. The collaboration aims to reduce confusion caused by divergent […]
Germany’s data privacy regulator has imposed a €49 million ($51 million) fine on Vodafone for violations of the country’s data protection rules, citing failures in safeguarding customer data. The penalty follows an investigation into the telecom company’s handling of user information, which regulators determined did not comply with established privacy standards. The regulator noted that […]
The U.K.’s tax authority disclosed that cybercriminals stole £47 million ($63 million) last year by compromising taxpayer accounts. His Majesty’s Revenue & Customs (HMRC) said the losses were the result of fraudsters hijacking online profiles, allowing them to redirect tax refunds and manipulate personal data for financial gain. The agency did not specify how the […]
An open-source remote access trojan known as Chaos RAT has been observed in recent cyberattacks targeting Linux systems, according to security researchers. The free tool provides attackers with capabilities such as reverse shell access, file management, and remote command execution, making it a versatile weapon in malicious campaigns. Chaos RAT, short for Remote Administration Tool, […]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), along with cybersecurity authorities from nine allied nations, has released a series of detailed guidelines to shield network edge devices from advanced cyber threats. These edge devices—such as firewalls, VPN gateways, and routers—are increasingly being exploited by threat actors, including state-sponsored groups. The guidance includes four technical […]
North Korean hackers target firms by deploying fake Zoom applications to hijack systems through deceptive video conferencing setups. The attackers use LinkedIn to pose as business professionals, initiating contact under the guise of legitimate investment or partnership inquiries. Once trust is established, the attackers invite victims to meetings hosted on spoofed domains resembling Zoom infrastructure, […]