Attackers abused fake ChatGPT Custom GPTs and ClickFix to deliver a multi-stage RAT, hiding payloads behind signed software.

A newly documented Windows remote access trojan called Kothamine Agent runs more than 30 commands and routes its control traffic through Tailscale's open-source tailcat tool, leaving defenders no ...

Windows 11 has long baked Bing into local search, and escaping it meant editing the registry. Version 26H2 finally adds a ...

TASK#STOMP deploys a PowerShell backdoor that steals documents and Wi-Fi passwords, monitors files, and executes remote commands.

The TASK#STOMP backdoor steals office documents on Windows PCs, grabs new files as they're saved, and can rebuild itself if partly removed.

Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.

Hackers use compromised websites and blockchain-based servers to steal bank logins and 2FA codes through malicious PowerShell ...