Latest

North Korean threat actors exploited a critical vulnerability in React's server components just two days after public disclosure, deploying sophisticated malware that uses Ethereum smart contracts for command and control. Security researchers at Sysdig discovered the new malware, named EtherRAT, within a compromised Next.js application. The speed

Attackers are compromising legitimate websites and converting them into distribution infrastructure for NetSupport RAT, a remote access trojan that provides complete control over infected systems. Security researchers at Securonix identified the campaign, named JS#SMUGGLER, which uses multi-stage infection chains involving obfuscated JavaScript, HTML applications, and PowerShell payloads. NetSupport RAT

Spanish National Police arrested a 19-year-old suspect accused of stealing 64 million personal records from nine companies and selling the data through underground forums. The case raises questions about how a teenager gained access to multiple corporate databases and whether the breached companies have notified affected individuals. The suspect faces

Security researchers at Zimperium identified Android malware that locks victims' device screens while establishing comprehensive remote control capabilities. The threat, named DroidLock, demands ransom payments to unlock devices while maintaining VNC access for data theft and surveillance. DroidLock represents an evolution beyond simple screen-locking ransomware. The malware combines device

Security researchers at Doctor Web discovered a trojan that mimics human browsing behavior to artificially inflate website traffic and manipulate search engine rankings. The malware, named ChimeraWire, targets Windows systems and represents a financially-motivated attack that monetizes infected machines through search engine optimization fraud. ChimeraWire builds on open-source projects zlsgo