An unknown miscreant is using "TerminalFix" to trick unsuspecting users into running PowerShell commands that infect their ...

TerminalFix uses fake Cloudflare CAPTCHA pages to trick users into running PowerShell malware, creating reverse tunnels that provide access to internal systems.

Windows keeps receipts for your downloads.

Bogus software download sites deploy malware that weakens Windows defenses and establishes persistence in China-based ...

Living-off-the-land binaries, often shortened to LOLBins, are legitimate Windows executables that attackers abuse to carry out malicious activity while blending in with normal administration. The ...

Morphisec uncovers RevStealer, a Windows infostealer spread through a fake Claude app that steals credentials, cryptocurrency ...

ANY.RUN uncovers a 46-country phishing campaign using fake tax documents, Vercel infrastructure, and legitimate RMM software ...

A StopAndProtect cybercrime campaign compromised nearly 2,000 WordPress websites, turning them into infrastructure to spread malware, steal data and control infected devices ...

Threat actors are actively abusing the legitimate Windows utility mshta.exe to execute malicious HTML Application (HTA) files ...

Blind Eagle-linked hackers target Colombia with phishing emails, password-protected archives, and malware to evade detection and steal data.

When a victim opens the HTA, Windows invokes mshta. exe, a legitimate Microsoft utility designed to execute HTML Applications. The malicious file pushes its own window off-screen and loads remote ...

If you have managed on-premises Exchange environments for any length of time, you have almost certainly run into situations ...