Researchers at the Hong Kong University of Science and Technology have developed a technique called SkillCloak that allows malicious AI agent skills…
Microsoft has discovered a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for.…
Google has filed a lawsuit against a Chinese cybercrime network accused of using its Gemini AI agent to power a phishing-as-a-service (PhaaS)…
ACR Stealer targets SharePoint folders for document exfiltration.
Cybersecurity researchers have uncovered two malicious campaigns linked to North Korean threat actors, exploiting developer tools like Microsoft Visual Studio Code (VS…
Overlord is an open-source Go framework repurposed by North Korean threat actors as a cross-platform malware loader for data theft and remote…
WhatsApp Web is a web-based version of the WhatsApp messaging application. It was targeted in the HermeticReader attack, where the Adobe Acrobat…
A known JavaScript malware associated with the Contagious Interview campaign. Delivered via malicious packages and extensions, it searches for configuration files and…
Chrome extensions are browser add-ons that the RAT targets to collect data, highlighting risks to developer tools.
StealC is an information stealer malware that harvests a wide range of data from compromised systems. It is deployed as a secondary…