Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures
Microsoft Threat Intelligence has uncovered a macOS ClickFix operation that uses more than 250 front-end domains to distribute malware, including MacSync and…
Tag: threat intelligence
Poison Claude Service Exposes Risks of Discounted AI Access, Okta Warns
Cybersecurity researchers at Okta have uncovered a network of underground services selling discounted access to Anthropic's large language models (LLMs), including Opus…
ANY.RUN Threat Intelligence Feeds: Real-Time Malicious Indicators
ANY.RUN Threat Intelligence Feeds provide fresh malicious indicators that complement behavioral detections as attacker infrastructure changes. They help analysts pivot from suspicious…
ANY.RUN Threat Intelligence Lookup: Pivoting on Indicators
ANY.RUN Threat Intelligence Lookup enables analysts to pivot from suspicious URLs, domains, IPs, and files to related infrastructure and activity. It is…
ANY.RUN Threat Intelligence Reports: Analyst-Compiled Campaign Insights
ANY.RUN Threat Intelligence Reports are manually compiled by analysts and focus on active malware and phishing campaigns, including APTs and cybercriminal groups.…
Kali365 Phishing Kit Exploits Microsoft Device Code Flow to Target US Enterprises
Kali365, a device code phishing kit, is actively targeting US organizations by abusing Microsoft's legitimate authentication flow. According to ANY.RUN telemetry, the…
Palo Alto Networks Unit 42: Analyzing ClickFix Variants and Evasion Techniques
Palo Alto Networks Unit 42 is the threat intelligence team at Palo Alto Networks. They analyzed recent ClickFix variants, including one abusing…
QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer
Fortinet FortiGuard Labs has disclosed a long-standing supply chain attack targeting QuickFox, a VPN and network acceleration tool popular among overseas Chinese…
Fake Adobe and Zoom Updates Deliver ScreenConnect for Persistent Remote Access
Cybersecurity researchers have uncovered an active, multi-wave campaign that uses social engineering lures themed around Adobe and Zoom updates, business document reviews,…
Vibe Hacking: How Generative AI Is Lowering the Barrier for Cyberattacks
The cybersecurity industry has long assumed that offensive capability scales with technical expertise, ranking attackers from nation-state actors to script kiddies. However,…