IntroductionIn February 2022, BlackBasta emerged as a successor to Conti ransomware and quickly rose to prominence. BlackBasta was operational for three years until February 2025 when their internal ...
The Payouts King ransomware is using the QEMU emulator as a reverse SSH backdoor to run hidden virtual machines on ...
AttackIQ has released a new attack graph that emulates the behaviors of NightSpire Ransomware, a financially motivated ...
PowMix targets Czech workforce since Dec 2025 using jittered C2 and ZIP phishing, enabling stealthy remote access and ...
A new malware family named 'AgingFly' has been identified in attacks against local governments and hospitals that steal ...
Malwarebytes warns that a fake Microsoft support site is distributing password-stealing malware through a spoofed Windows update installer ...
CERT-UA links the AgingFly credential-stealing campaign to phishing, browser theft, and modular remote access.
The uncomfortable truth is that it is impossible to block all ransomware all the time. That is not a failure of effort, it ...
This week, a "Raccoon"-linked actor hit help desks, Eurail exposed 308K users, Fortinet patched critical flaws, Pushpaganda ...
A nascent Android remote access trojan called Mirax has been observed actively targeting Spanish-speaking countries, with ...
File Explorer sucks less with these 5 tools.
Malwarebytes recently uncovered a new malicious campaign targeting the Windows Update service. Focused on French-speaking users, the campaign uses layered obfuscation techniques to deliver multiple ...