A financially motivated operation uses lures of cracked or pirated software to deliver a malware two-for-one combo for data theft and cryptomining.
A threat group researchers call "Armored Likho" has gained access to government agencies and electrical power entities in Russia, Brazil, and Kazakhstan.
The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp, targeting credentials linking development and admin environments to wider enterprise systems.
Apple installiert auf Geräten mit seinem nächsten iPhone-Betriebssystem ein Minimal-OS zum Debugging. Das wurde nun erweitert. Auch iPads bekommen es.
As attackers increasingly favor stolen credentials over exploits, infostealers have become a primary source of access for ransomware and other cybercrime operations. The post Infostealers Turn Millions of Devices Into Credential Theft Machines appeared first on SecurityWeek.
Red-Hat-Infostealer kommt auf mehr als 100.000 Downloadsheise Developer Quelle: Heise Security Ticker
The Ukrainian cyberpolice, working in conjunction with U.S. law enforcement, has identified an 18-year-old man from Odesa suspected of running an infostealer malware operation targeting users of an online store in California. […]
The SHub Reaper stealer, which hides behind fake WeChat and Miro installers, marks a shift from ClickFix social engineering to Apple script-based execution.
A new variant of the ‚SHub‘ macOS infostealer uses AppleScript to show a fake security update message and installs a backdoor. […]