Fastly: Edge Cloud Platform
Fastly is an edge cloud platform providing CDN and security services. It was found susceptible to both bandwidth and connection amplification attacks,…
Tag: Edge
DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake…
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
ACR Stealer, an infostealer active since 2024, is targeting enterprise networks by stealing saved browser passwords, live session tokens, PDFs, Microsoft 365…
G-Core Labs: Cloud and Edge Services Provider
G-Core Labs is a cloud and edge services provider that hosted the IP address 92.38.177.17 used by the npm campaign infrastructure.
WhatsApp-to-Host Attack Chain Exploits Three OpenClaw Flaws for Code Execution
Security researcher Chinmohan Nayak has detailed a WhatsApp-to-host attack chain leveraging three now-patched vulnerabilities in the OpenClaw personal AI assistant. The flaws,…
ChocoPoC RAT Targets Researchers via Fake PoC Exploit Repos on GitHub
Attackers are distributing a data-stealing trojan named ChocoPoC through fake proof-of-concept (PoC) exploit repositories on GitHub, specifically targeting vulnerability researchers. The malware,…
Edge Browser: Headless Mode for C2 Transport
TWINLOOT launches the victim's Edge browser in headless mode and uses CDP to ferry Graph API traffic, making it indistinguishable from legitimate…
Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit
Attackers hijacked over 400 packages in the Arch User Repository (AUR) by adopting orphaned projects and modifying build scripts to deploy a…
Microsoft Edge Browser
Microsoft Edge is a browser targeted by the information stealer in the DPRK malvertising campaign. The malware harvests data from Edge among…