A new ransomware actor called Spirals completed a corporate intrusion, from initial access to data theft and encryption, in ...

Spirals ransomware can encrypt a network in under 24 hours. See how it uses IIS access, Windows tools, and double extortion ...

You can wrap an executable file around a PowerShell script (PS1) so that you can distribute the script as an .exe file rather than distributing a “raw” script file. This eliminates the need to explain ...

One of the Russian government’s most elite hacking groups has adopted an attack, known as Clickfix, to compromise devices belonging to sensitive organizations in Ukraine, the latter country’s CERT ...

A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized software to steal credentials and ...

Encrypting files can often be necessary. Whether you're sharing or storing a file, the right app is key. Encrypto makes encrypting files on MacOS so easy. Every so often, I have to encrypt a file on ...

Prinz Eugen ransomware targets recently modified files first and skips ransom notes, exposing backup, EDR, and incident response gaps for IT teams.

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

Windows PowerShell is a powerful terminal from Microsoft which allows you to automate and script tasks on Windows machines and interact with many of the applications available on them. It is a huge ...

The modular Golang backdoor combines remote administration, multiple disk-wiping logics, and a Crucio-derived ransomware ...

This week’s ThreatsDay Bulletin covers spyware-laced game cheats, fake installers, infostealer, ransomware, phishing kits, ...