Russia’s GRU hacked a NATO naval shipbuilder, aircraft engine manufacturer, and law enforcement agency using HOOKEDGE, a backdoor that routes spy commands through an invisible 1-pixel Microsoft Edge ...

Brevo confirmed that attackers stole a Cloudflare API key and used it to inject malicious ClickFix scripts into its websites and JavaScript files embedded on customer sites to distribute malware. The ...

Encode a file. Inspect a token. Get back to work. Base64 Converter Pro is a browser toolkit for developers and administrators who need to move between files, encoded text and readable data.

Iran-linked operators are using a trusted developer tool to conceal a backdoor called Dindoor inside Windows environments. The malware uses the Deno JavaScript and TypeScript runtime to execute ...

MuddyWater-linked threat actors are using a backdoor named Dindoor that abuses the legitimate Deno runtime to execute malicious code and evade security detection. Researchers at Binary Defense began ...

ClickFix campaigns compromise thousands of systems globally on a daily basis. Threat actors leverage BNB Chain smart contracts to avoid traditional malware removal. Fraudulent CAPTCHA screens deceive ...

Cloudflare Queues is integrated with Cloudflare Workers. To send and receive messages, you must use a Worker. A Worker that can send messages to a Queue is a producer Worker, while a Worker that can ...

Malware on approximately 2,000 WordPress sites hid C2 instructions in Steam profile comments using invisible Unicode. GoDaddy researchers spotted a command-and-control infrastructure for a malware ...

TrendAI™ Research analyzed an intrusion where threat actors used the EtherHiding technique to route ClearFake payload delivery through smart contracts on the BNB Smart Chain testnet. The attack chain ...

In our previous research, we analyzed a Windows infostealer we track as NWHStealer. The attackers behind this stealer are continuously finding new methods to distribute the stealer. During our hunting ...