Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...
Redmond Magazine

Banks Targeted by Fileless Phantom Stealer Phishing Campaign

Phantom Stealer phishing targets banks with fileless malware and in-memory Windows process injection. The infostealer harvests credentials, cookies, financial data, screenshots, and cryptocurrency ...
Infosecurity-magazine.com

Fake Software Tutorials on TikTok Spread Vidar Stealer

Threat actors have been using short-form videos on TikTok and Instagram Reels to push the Vidar infostealer, disguising the attacks as tutorials for unlocking premium software for free. New analysis ...
Ars Technica

For the 2nd time in weeks, Microsoft packages laced with credential stealer

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...
Euronews

Are you a chip stealer? They really do taste better from someone else’s plate, study finds

Whether you're the person taking another person's chips or the victim of such an act, a new study offers an explanation: stolen food tends to taste more ap-peeling. Some might call chips the universal ...
Mashable

Everything you need to know about the malware stealing data from Mac users

Mac users have a new malware threat to be on the watch out for. According to a new report by Malwarebytes, Infiniti Stealer is a new malware attack targeting Mac users that utilizes social engineering ...
PC World

Zoom users, beware: These browser extensions are spying on you

PCWorld reports that 18 malicious browser extensions linked to Chinese hacker group DarkSpectre are stealing sensitive Zoom meeting data from users. These dangerous extensions have been downloaded 2.2 ...
CSOonline

MacSync Stealer malware bypasses macOS Gatekeeper security warnings

The MacSync Stealer macOS malware can now infect victims’ computers using what appears to be a legitimate application with minimal user interaction, according to Apple device management and security ...
9to5Mac

MacSync Stealer variant finds a way to bypass Apple malware protections

We’ve recently seen how ChatGPT was used to trick Mac users into installing MacStealer, and now a different tactic has been found to persuade users to install a version of MacSync Stealer. The Mac ...
Infosecurity-magazine.com

Lumma Stealer Developers Doxxed in Underground Rival Cybercrime Campaign

Lumma Stealer operations have been unravelling and a recent doxxing campaign targeted individuals allegedly affiliated with malware development and administration. Sensitive details of these core ...
Ars Technica

Here’s how potent Atomic credential stealer is finding its way onto Macs

Ads prominently displayed on search engines are impersonating a wide range of online services in a bid to infect Macs with a potent credential stealer, security companies have warned. The latest ...