News

Researchers from Seqrite Labs have uncovered a new malicious campaign believed to target the Russian automotive industry and e-commerce platforms. The attackers are deploying a previously unknown .NET-based backdoor named CAPI to conduct data theft and system reconnaissance. Infection Vector: Phishing with a Tax-Themed Decoy According to the researchers, the

Kaspersky Lab researchers have uncovered a malicious package on the npm registry named https-proxy-utils, disguised as a legitimate proxy management tool. The package secretly installed the AdaptixC2 framework — an open-source post-exploitation toolkit similar to Cobalt Strike — onto compromised developer devices. The malicious package has since been removed from npm. AdaptixC2:

European law enforcement has shut down one of the world’s largest SIM farm operations, responsible for fueling a massive global market in fake online accounts. The takedown—codenamed Operation SIMCARTEL—dismantled a criminal network managing over 1,200 SIM boxes loaded with 40,000 active SIM cards used in

China’s Ministry of State Security (MSS) has accused the U.S. National Security Agency (NSA) of conducting cyberattacks against the country’s National Time Service Center (NTSC), a critical institution responsible for maintaining Beijing Time and coordinating national synchronization systems. In a statement posted to its official WeChat account,

Trend Micro researchers have discovered a new malicious campaign targeting unpatched Cisco devices, using a recently fixed zero-day vulnerability to deploy rootkits that hide deep within network firmware. The flaw, CVE-2025-20352 (CVSS 7.7), affects all supported versions of Cisco IOS and IOS XE, the operating systems powering much of

Google’s Threat Intelligence Group (GTIG) has uncovered a new North Korean cyber campaign that hides malware within blockchain smart contracts — a sophisticated evasion method known as EtherHiding. According to GTIG, the group UNC5342 has used this technique since February 2025 in “Contagious Interview” operations aimed at stealing cryptocurrency from