HellsUchecker: Backdoor Delivered via EtherHiding and ClickFix
HellsUchecker is a backdoor delivered via EtherHiding and ClickFix campaigns, capable of executing files retrieved from C2 and reporting results back.
Category: Malware
Malware families, payloads, loaders, ransomware and related tooling.
LockBit — Malware profile
LockBit was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
Cybersecurity researchers have identified multiple ClickFix campaigns deploying three new malware loaders: BabaDeda Loader, Lorem Ipsum Loader, and Potemkin. These campaigns use…
BabaDeda Loader: A Stealthy Malware Loader Targeting Education and Finance
BabaDeda Loader is a malware loader first documented by Morphisec in November 2021. It uses ClickFix social engineering to deliver payloads like…
Lorem Ipsum Loader: A New Backdoor Delivered via Compromised WordPress Sites
Lorem Ipsum Loader is a nascent loader and backdoor active since February 2026. It is delivered through ClickFix lures on compromised WordPress…
Cryptocurrency-Stealing Remote Access Trojan Deployed in Mastra Attack
A cross-platform information stealer deployed as the final payload in the Mastra supply chain attack. It harvests browser history, steals data from…
easy-day-js: Malicious npm Package Used in Mastra Supply Chain Attack
easy-day-js is a malicious npm package that cloned the legitimate 'dayjs' date library. Published by user 'sergey2016', it initially appeared clean but…
PLEASE_READ_ME Ransomware Campaign
A ransomware campaign that compromised over 250,000 MySQL databases by brute-forcing weak credentials, highlighting the risk of exposed databases.
Malicious JetBrains Plugins Steal AI API Keys; Chrome Extensions Capture Chatbot Chats
Cybersecurity researchers have uncovered a coordinated malware campaign on the JetBrains Marketplace involving 15 malicious plugins that exfiltrate AI provider API keys.…
PromptSnatcher: Chrome Extensions Steal AI Chatbot Conversations
PromptSnatcher is a data collection operation involving two Chrome ad blocker extensions that capture users' conversations with AI chatbots from platforms like…