Mozilla Firefox add-ons 'Bypass' and 'Bypass XM' were abusing the proxy API to circumvent paywalls.... Read More
Malware
Source code revealed for malware that locks IoT male chastity devices
The ChastityLock malware locks your tool up and has got you by the balls, literally. ... Read More
New Golang malware runs Monero miner on servers
The Golang malware breaches Windows, Linux servers and exploits popular vulnerabilities such as a critical RCE in Oracle WebLogic. ... Read More
A new strand of malware uses Word files with macros to download a PowerShell script from GitHub. This PowerShell script further downloads a legitimate image file from... Read More
Chaes malware strikes Latin American e-commerce sites
Researchers from the Cybereason Nocturnus Team have been keeping tabs on an undetected malware known as “Chaes.” The malware discovered sometime between mid-2020 and now... Read More
‘CursedGrabber’ Discord malware possibly linked to Russian and Ukrainian hackers
Newly discovered Discord malware "CursedGrabber" has possible links to Russia and Ukraine. It was found infiltrating the npm open source registry.... Read More
Telegram app used by malware to infiltrate online stores
Telegram is being actively used by malware authors targeting e-commerce websites built on Prestashop, Magento and WooCommerce.... Read More
NodeJS malware caught exfiltrating IPs, username, and device information on GitHub
Multiple NodeJS packages laden with malicious code have been spotted on npm registry. These “typosquatting” packages served no purpose other than collecting data from the... Read More
A malware alert left hundreds of Bank of America customers panicking
Hundreds of Bank of America customers had trouble accessing their bank accounts yesterday due to Avast and AVG antivirus engines flagging the site as "malware."... Read More
Behind an entire catalogue of malicious Chrome extensions? Allegedly, a domain registrar
It is not unusual for malware to use malicious C&C servers and domains. However, what we learn this week is something entirely different, sinister and... Read More
Theme park giant Parques Reunidos hit by a ransomware cyber attack 
Phishing kit screenshots your email domain on the fly to appear real 
Royal Mail online tracking returns — with a frustrating captcha that works half the time 
New convincing phishing campaign targets Booking.com and Blockchain.com customers