ACR Stealer is targeting enterprises through ClickFix lures, PowerShell scripts, blockchain services, and malicious image ...

A solo Russian-speaking threat actor known as "bandcampro" outsourced a chunk of their operations to Google's open-source ...

Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication ...

ACR Stealer campaigns use ClickFix lures, JPEG steganography, and WebDAV to steal browser tokens, passwords, PDFs, and synced ...

Invoke-TheHash contains PowerShell functions for performing pass the hash WMI and SMB tasks. WMI and SMB connections are accessed through the .NET TCPClient. Authentication is performed by passing an ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

A new ransomware actor called Spirals completed a corporate intrusion, from initial access to data theft and encryption, in ...

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint ...

The Check Point Research AI Security Report 2026, published by Check Point Software Technologies , describes a cybersecurity ...

As a former banker, this terrifies me beyond measure ...

ESET researchers discovered 11 vulnerable UEFI shim bootloaders signed by Microsoft that allow attackers to bypass UEFI ...