From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency ...

ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices ...

The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.

A likely AI-generated PowerShell script mapped Active Directory after an attacker gained RDP access to a Windows Server with ...

Four scripts to fix them all ...

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...

A threat actor has been caught using AI-generated malware in a real network intrusion, deploying a PowerShell script that an ...