Adobe Acrobat Chrome Extension Flaw (CVE-2026-48294) Enables Silent WhatsApp Data Theft
Cybersecurity researchers at Guardio Labs have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension, which has over…
Tag: data theft
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices with Malware
Russian state-sponsored threat actors from the UAC-0145 sub-cluster, linked to Sandworm and GRU, are using fake CAPTCHA checks on compromised websites to…
Clop Ransomware Group Exploited MOVEit Zero-Day in 2023
The Clop ransomware group exploited a zero-day vulnerability in Progress MOVEit in 2023, impacting over 2,700 organizations. They are known for large-scale…
Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages
Unknown threat actors compromised the Injective Labs SDK project's GitHub repository and leveraged it to publish a malicious package on the npm…
Attackers Exploit ‘Ill Bloom’ Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets
Security firm Coinspect has disclosed a crypto wallet flaw called 'Ill Bloom' that is being actively exploited by attackers. The vulnerability stems…
Rogue Agent Flaw in Google Dialogflow CX Could Let Attackers Hijack AI Chatbots
A critical vulnerability in Google's Dialogflow CX, dubbed 'Rogue Agent' by security firm Varonis, could have allowed an attacker with edit permissions…
OneDrive: Synced Files Stolen by ACR Stealer
ACR Stealer steals files from synced OneDrive folders as part of its data exfiltration.
Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT
A suspected China-nexus threat activity cluster, codenamed Operation DragonReturn by Seqrite Labs, has been targeting Indian taxpayers, tax professionals, and corporate finance…
DcRAT: Remote Access Trojan Deployed in Operation DragonReturn
DcRAT is a remote access trojan used in the Operation DragonReturn campaign to steal sensitive data from compromised hosts. It is delivered…
Opera GX Flaw Allowed Silent Mod Installation to Exfiltrate Gmail Addresses via CSS Injection
Researchers discovered a critical vulnerability in Opera GX, the gaming-oriented browser, that enabled malicious websites to silently install browser mods and exfiltrate…