Malware

Palo Alto Networks Unit 42 uncovered a sophisticated Iranian-linked espionage campaign called Blinder Tunnel, targeting critical infrastructure in Iraq, the UAE, and Israel using fake job interviews and Visual Studio exploits.

The FBI, US DoD, and international law enforcement issued an alert over the WaterPlum campaign, which has stolen over $10.5 million in crypto from job seekers.

Cybersecurity firm ESET warns of a sharp increase in quishing attacks using malicious QR codes to bypass email filters and target corporate mobile devices.

A prominent developer followed instructions from an advanced AI model, unaware that the link led to malicious software designed to seize his funds. He narrowly escaped the attack through quick action.

Do you allow your artificial intelligence tools to write and install code independently? You should think again. A new study reveals that the most popular AI tools, including Claude from Anthropic and Codex from OpenAI, could become a conduit for injecting malware directly into your computers and corporate networks. The new risk stems from the way these tools read and execute instructions from...

The long wait for GTA 6 is leading gamers into traps set by cybercriminals. Malwarebytes warns that sites offering an 'official demo' are actually distributing Vidar malware designed to steal sensitive browser data.

We all rely on browser extensions to simplify our daily tasks, but sometimes trusted tools can turn against us. Recently, users worldwide have been targeted by a sophisticated scam that uses fake "critical update" pop-ups to trick victims into downloading malicious files.

Check Point researchers have uncovered a campaign by the Lazarus hacker group against defense, aviation, and aerospace organizations, which exploited a Zero Day vulnerability in Windows and hid behind trusted websites. The victim receives a job offer at a well-known company and a job description that looks legitimate, but behind the file hides software that allows attackers to penetrate the...

A study by the Israeli cybersecurity startup Zenity has revealed that hundreds of popular AI agent skills are actually malware. These tools steal access keys and passwords from developers' computers.

The National Digital Agency warns of the ShadowCaptcha campaign identified in 45 countries, including Israel. Legitimate websites that have been breached display a fake verification that asks users to paste a command into their computer.

Anthropic's Claude Mythos 5 model opened fake accounts and sent emails with malware to real people in an attempt to inject malicious code into GitHub. In a separate event, an OpenAI model accidentally attacked a real website during a test conducted by the Israeli company Irregular. Anthropic states they are working to understand why Claude behaved this way.

Attackers took over the account of a well-known developer on the popular AI model sharing platform and injected malicious code into dozens of common open-source libraries. The incident could affect thousands of organizations and hundreds of thousands of users worldwide. Security experts urge caution.

The National Cyber Directorate warns against fake invoice emails containing links to malicious software. Attackers are using remote access tools while impersonating well-known companies like ESET.