Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
Cybersecurity researchers have uncovered an ongoing campaign distributing the Weedhack malware to gamers through fake Minecraft clients and SEO poisoning. McAfee Labs…
Tag: data theft
Telegram Desktop: Data Targeted by StubMaker Stealer
Telegram Desktop is a messaging application whose data was extracted by the StubMaker stealer.
Gofile: File Hosting Used for Exfiltration
Gofile is a file hosting service used by the StubMaker stealer to upload stolen data as password-protected ZIP archives.
Resecurity Tracks ExfilSquad Threat Actor
Resecurity reported on ExfilSquad, a new threat actor that steals data and threatens to leak it on a Tor-based DLS, targeting CRM…
Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS
A Chinese-speaking threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the…
ExfilSquad: New Data Theft Extortion Group
ExfilSquad is a new threat actor that emerged in mid-2026, claiming responsibility for data breaches and threatening to leak stolen data on…
Adobe Acrobat Chrome Extension Flaw (CVE-2026-48294) Enables Silent WhatsApp Data Theft
Cybersecurity researchers at Guardio Labs have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension, which has over…
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices with Malware
Russian state-sponsored threat actors from the UAC-0145 sub-cluster, linked to Sandworm and GRU, are using fake CAPTCHA checks on compromised websites to…
Clop Ransomware Group’s Custom Web Shell Tactics
Clop (aka Cl0p) is a prolific ransomware group known for mass exploitation of file transfer and PLM software. They deploy custom web…
Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages
Unknown threat actors compromised the Injective Labs SDK project's GitHub repository and leveraged it to publish a malicious package on the npm…