CrashFix crashes browsers to coerce users into executing commands that deploy a Python RAT, abusing finger.exe and portable Python to evade detection and persist on high‑value systems.

Not all applications are created with remote execution in mind. PowerShell provides several ways to invoke applications on ...

This is Part 2 of our two-part technical analysis on the Gopher Strike and Sheet Attack campaigns. For details on the Gopher Strike campaign, go to Part 1.IntroductionIn September 2025, Zscaler ...

Launch multiple apps at once, clear temporary files, and more.

A new open-source and cross-platform tool called Tirith can detect homoglyph attacks over command-line environments by ...

China-linked Mustang Panda used updated COOLCLIENT malware in 2025 espionage to steal data from government and telecom ...

A complex phishing campaign uses decentralized fake PDFs that mount virtual drives to silently install the AsyncRAT malware.

Lately, there’s been a lot of buzz about a new computer virus, and honestly, it’s kind of a big deal. These aren’t your grandpa’s viruses anymore; they’re getting super sneaky. Think fake update ...

A new malicious campaign mixes the ClickFix method with fake CAPTCHA and a signed Microsoft Application Virtualization (App-V) script to ultimately deliver the Amatera infostealing malware.

Microsoft links SolarWinds WHD exploits to RCE, lateral movement, and domain compromise in multi-stage attacks.

ESET researchers discover an Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links to a broader spy operation.

On Windows, the system creates fake python.exe and python3.exe commands via App Execution Aliases. These do not run the actual Python installation and instead redirect to the Microsoft Store, causing ...