Search
Results for "Campaign".
US authorities have dismantled the FaceStealer campaign, a North Korean operation responsible for over $400 million in cryptocurrency theft, using sophisticated social engineering tactics.
Hackers are increasingly using GSocket, a legitimate remote access tool, to maintain persistent access to Linux servers, even after initial vulnerabilities are patched.
ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to deploy rogue remote-access clients, impacting dozens of organizations.
A phishing campaign used Google Calendar invites, trusted redirects, and fake login pages to hijack corporate Google sessions and bypass MFA protections.
Anti-oligarchy activists plan to dox high-profile billionaires and their networks, raising $1.2M from wealthy traitors.
Researchers have uncovered a new Hugging Face malware campaign targeting GPUs for crypto mining, highlighting the evolving threat landscape in the AI space.
Elon Musk's America PAC spent over $76 million in the final weeks of the midterms, focusing heavily on the Texas Senate race, highlighting the significant influence of tech billionaires in American politics.
More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer.
Turning Point, a conservative grassroots group, plans to spend millions in the midterms, focusing on key states and leveraging outside super PACs to aid Republican candidates.
A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credentials via a fake lock screen.
Hackers compromised over 14,500 Dahua IP cameras in a 35-day campaign, using brute-forcing, serial number recovery, and exploiting vulnerabilities to access and exfiltrate data.
Russian threat group Sandworm uses fake job offers to trick IT pros into installing a malicious WireGuard client, raising security concerns.
EBay has agreed to pay $55.7 million in a settlement with the founders of EcommerceBytes, a Massachusetts-based news site that covered ecommerce, for a harassment campaign that included doxing, threats, and deliveries of live pests.
Hackers are hijacking hotel Wi-Fi DNS settings to redirect users to fake Microsoft 365 login pages, compromising sensitive business information and communications.
A large-scale operation dubbed 'FakeGit' is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories that accumulated more than 14 million downloads.
The Australian Cyber Security Centre (ACSC) issued an alert about a global exploitation campaign targeting vulnerable content management systems (CMS) and plugins.
The massive FortiBleed credential theft campaign has been linked to the INC and Lynx ransomware operations, suggesting the stolen Fortinet credentials were intended to fuel future network intrusions.
Adobe has released security patches for seven maximum-severity vulnerabilities in the ColdFusion web app development platform and the Campaign Classic marketing automation platform.
Samsung unveils a new Instagram campaign to hint at its upcoming mobile releases, focusing on the rumored Galaxy Z Fold8 and other wearables.
Security firm SOCRadar says the large-scale FortiBleed campaign targeting Fortinet FortiGate devices used custom sniffers to harvest authentication secrets from compromised firewalls and steal credentials.
Klue suffered an OAuth breach that allowed 'Icarus' threat actors to steal Salesforce CRM data from multiple organizations in an ongoing extortion campaign, with Salesforce disabling the Klue Battlecards integration as a precaution.
Chinese hackers have conducted a decades-long espionage campaign, targeting a critical infrastructure network and maintaining persistence for 10 years with full visibility into administrative activity.
At a small kickoff event in Los Angeles, Dan Greaney explained why he could no longer stand by and watch the demolition of American.
A new Magecart campaign is using Stripe's API infrastructure to host the credit card-stealing payload and data exfiltrated from checkout pages, relying on Google Tag Manager and Stripe domains.
A large-scale malware campaign dubbed WeedHack is targeting Minecraft players and has infected more than 116,000 systems since January.
A large-scale malware campaign dubbed WeedHack is targeting Minecraft players and has infected more than 116,000 systems since January.
The Manhattan Institute, a right-wing think tank, is pushing state-level legislation to reclassify minor protest-related crimes as felonies, including vandalism, blocking a roadway, or trespassing during a protest.
Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide command-and-control (C2) data.
A selected YouTube video about Aerospace, with context from NASA Ames and a practical checklist before watching.
A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows.
