Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
A malware operator left its delivery server exposed, allowing Rapid7 to recover a full toolkit of 1,048 files including lure templates, filename-spoofing…
Tag: phishing
CVE-2025-24054: NTLM-Leak Vulnerability
A vulnerability that leaks NTLM credentials, included in the operator's test sets for phishing delivery.
WebDAV Malware Campaign
A malware campaign using WebDAV shares to deliver infostealers and RATs, leveraging AI-assisted tooling and multiple CVEs.
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More Ravie LakshmananJul 20, 2026Cybersecurity / Hacking A single…
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft Ravie LakshmananJul 17, 2026Malware / Threat Intelligence Cybersecurity researchers have attributed the…
Cyderes Howler Cell: Cybersecurity Team Documenting Cruciferra Campaigns
Cyderes Howler Cell is a cybersecurity team that documented tax-themed phishing campaigns using the Cruciferra crypter, alongside Seqrite Labs.
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories Ravie LakshmananJul 16, 2026Hacking News / Cybersecurity News A…
20+ Hijacked Brazilian Government Websites Used as Malware Delivery Channels in PhantomEnigma Campaign
More than 20 Brazilian government websites were hijacked and turned into malware delivery channels in an active PhantomEnigma campaign uncovered by ANY.RUN,…
Daxin Rootkit Resurfaces in Taiwan Alongside Novel Stupig Pre-Logon Backdoor
An advanced malware previously attributed to a China-linked threat actor has resurfaced after more than four years within a Taiwan manufacturing firm,…
OkoBot Malware Framework Overview
OkoBot is a malware framework targeting Windows systems since April 2025, featuring over 20 payloads and implants. It includes the SeedHunter module…