Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining 'unrealistic browser-malware concepts with…
InfernoGrabber v9.0 is a Python Flask-based malware generated using DeepSeek. It operates as a malicious web server, stealing Discord tokens, credit card…
OYSTERBLUES is an information stealer malware delivered via spear-phishing campaigns by UNC1151, targeting Ukrainian government organizations to exfiltrate sensitive data.
Cybersecurity researchers have identified multiple ClickFix campaigns deploying three new malware loaders: BabaDeda Loader, Lorem Ipsum Loader, and Potemkin. These campaigns use…
BabaDeda Loader is a malware loader first documented by Morphisec in November 2021. It uses ClickFix social engineering to deliver payloads like…
DanaBot is an information stealer delivered via BabaDeda Loader in ClickFix campaigns. It is deployed using DLL side-loading and targets sensitive data.
A cross-platform information stealer deployed as the final payload in the Mastra supply chain attack. It harvests browser history, steals data from…
On June 17, 2026, a software supply chain attack codenamed 'easy-day-js' compromised 145 npm packages under the @mastra/* namespace, a popular open-source…
easy-day-js is a malicious npm package that cloned the legitimate 'dayjs' date library. Published by user 'sergey2016', it initially appeared clean but…
RedLine is an information stealer malware that targets credentials, browser data, and cryptocurrency wallets. It is commonly distributed via phishing and malicious…