BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found to operate…
Tag: VBScript
Armored Likho Targets Government and Power Sector with BusySnake Stealer
A previously undocumented threat actor, Armored Likho, has been attributed to cyber attacks targeting government agencies and the electric power sector across…
ClickFix: Malware Delivery Mechanism Used in Social Engineering Campaigns
ClickFix is a malware delivery technique that tricks users into running malicious commands by presenting fake error messages or update prompts. It…
Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse
Russian APT group Gamaredon has continued its cyber onslaught against Ukraine throughout 2025, deploying new malware and increasingly abusing legitimate cloud services.…
PteroSetup: Gamaredon VBScript Weaponizer
PteroSetup is an older VBScript weaponizer used by Gamaredon to replace legitimate installer files with 7z SFX archives containing malicious VBScript downloaders.
PteroDum: Gamaredon VBScript Tool
PteroDum is a tool used by Gamaredon to fetch and execute VBScript payloads in memory.
VBScript — Cybersecurity product profile
VBScript was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Junior Hacker Used Tailscale and OpenSSH to Maintain Persistent Access After C2 Outage
A French-speaking attacker, operating under the handle 'Poisson,' breached a small French automotive business using a keylogger to steal banking and email…
WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool
A new active campaign is targeting WhatsApp Desktop and WhatsApp Web users across multiple countries, including Malaysia, Brazil, India, Mexico, Singapore, the…