A MacOS-focused social engineering campaign orchestrated by North Korea-based threat actor Sapphire Sleet has been exposed by ...
1d
Daployi Launches Self-Hosted Edge Device Management Platform to Streamline Distributed Docker Fleets
April 16, 2026) - Daployi announced the official launch of its self-hosted edge device management platform, providing DevOps and operations teams with a centralized solution for managing distributed ...
North Korea's Sapphire Sleet uses fake job offers and phony Zoom updates to deliver ClickFix attacks that steal credentials ...
It automatically backs up all your configuration files and lets you rebuild them on new machines with one click!
PHANTOMPULSE spreads via Obsidian plugin abuse in REF6598 campaign, targeting finance and crypto users, bypassing AV controls ...
Cargo-stealing hackers have a new trick up their sleeve: using a third-party code-signing service makes their remote ...
A digitally signed adware tool has deployed payloads running with SYSTEM privileges that disabled antivirus protections on ...
Discover the techniques that help popular scripts succeed.
DPRK-linked actors use GitHub C2 and LNK phishing in South Korea, enabling persistent PowerShell control and data ...
The multi-stage campaign targeting South Korea uses weaponized Windows shortcuts and GitHub-based command and control to ...
Cookie-gated PHP webshells use obfuscation, php-fpm execution, and cron-based persistence to evade detection in Linux hosting environments. This post examines how this tradecraft conceals execution ...
A series of malicious LNK files targeting users in South Korea has been detected using a multi-stage attack chain that uses GitHub as command and control (C2) infrastructure.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results