Over 269,000 legit websites hijacked with hidden JavaScript redirecting search engine visitors to malware and scams.

Using a stealthy JSFireTruck obfuscation, attackers fingerprint devices to serve fake CAPTCHAs, tech support scams, and malware—evading detection at scale.
#CyberSecurity #MalwareAttacks https://thehackernews.com/2025/06/over-269000-websites-infected-with.html

Cybercriminals have entered the AI gold rush to spread malware. Fake AI video generators are tempting users and stealing their data.

#cybercrime #cybersecurity #AI #MalwareAttacks https://cybernews.com/security/ai-video-generator-phishing-malware/?utm_source=cn_twitter&utm_medium=social&utm_campaign=cybernews&utm_content=tweet&source=cn_twitter&medium=social&campaign=cybernews&content=tweet

#Bumblebee malware SEO poisoning campaign uncovered earlier this week aimpersonating RVTools is using more typosquatting domainsi mimicking other popular open-source projects to infect devices used by IT staff. #MalwareAttacks #CyberSecurity https://www.bleepingcomputer.com/news/security/bumblebee-malware-distributed-via-zenmap-winmrt-seo-poisoning/

New malware drop from Golden Chickens: TerraStealerV2 steals browser logins, crypto wallets, and extensions, while TerraLogger silently records keystrokes.

Spread via EXE, MSI, LNK, OCX
Sends data to Telegram + shady domain
#cybersecurity #MalwareAttacks
https://thehackernews.com/2025/05/golden-chickens-deploy-terrastealerv2.html

New #CyberAttackAlert!

Senior members of the World Uyghur Congress were targeted by malware hidden in a fake UyghurEdit++ app, Citizen Lab reports (Mar 2025).

— Custom-made spyware
— Links to China
— Started as early as May 2024
#MalwareAttacks https://thehackernews.com/2025/04/malware-attack-targets-world-uyghur.html

UNC5174 (aka Uteus), tied to China, is quietly breaching Linux & macOS systems using SNOWLIGHT malware + a fake Cloudflare app (VShell).

Targets: 20+ nations | Sectors: Gov, finance, defense
Tactics: Open-source tools, fileless payloads, fake authenticator apps
Risk: Remote control, in-memory attacks, hard-to-trace
#MalwareAttacks #CyberSecurity
https://thehackernews.com/2025/04/chinese-hackers-target-linux-systems.html

New Chinese cyber attack spotted.

FamousSparrow breached a U.S. trade group + Mexican institute using new, modular malware: SparrowDoor + ShadowPad (first use).
#MalwareAttacks #CyberAlerts https://thehackernews.com/2025/03/new-sparrowdoor-backdoor-variants-found.html

Malware Alert! Hackers are using Microsoft’s .NET MAUI to build fake banking & social apps targeting Indian and Chinese users.

Targets include banks, X (Twitter), and photo apps. Malware hides in app buttons—stealing info when tapped.
.NET MAUI was built for good. Attackers are turning it into a weapon.
#MalwareAttacks
https://thehackernews.com/2025/03/hackers-use-net-maui-to-target-indian.html

Have I Been Pwned data breach notification service has added over 284 million accounts stolen by information stealer malware and found on a Telegram channel. #MalwareAttacks #CyberCrime https://www.bleepingcomputer.com/news/security/have-i-been-pwned-adds-284m-accounts-stolen-by-infostealer-malware/

Cybercriminals are using the ClickFix technique to spread the NetSupport RAT in 2025. Embedded in fake CAPTCHA pages, this RAT grants attackers full control, stealing sensitive data and spying in real-time.
#CyberCrime #MalwareAttacks
https://thehackernews.com/2025/02/5-active-malware-campaigns-in-q1-2025.html

A new malware campaign targets Belarusian activists and the Ukrainian military, using Excel files to deliver PicassoLoader.

The malicious Excel file tricks users into enabling obfuscated macros, which deploy a stealthy RAT and additional payloads. #UkraineRussiaWar #MalwareAttacks https://thehackernews.com/2025/02/belarus-linked-ghostwriter-uses.html

Cyberattackers are using a vulnerable Windows driver to evade detection and deliver the #Gh0stRAT malware.

Thousands of modified driver variants, including RogueKiller’s truesight.sys, are now actively bypassing defenses. #MalwareAttacks #CyberAttacks https://thehackernews.com/2025/02/2500-truesightsys-driver-variants.html

An Android malware app called SpyLend has been downloaded over 100,000 times from #GooglePlay, where it masqueraded as a financial tool but became a predatory loan app for those in India. #MalwareAttacks #SpyLend #CyberSecurity #Android https://www.bleepingcomputer.com/news/security/spylend-android-malware-downloaded-100-000-times-from-google-play/

A large-scale malware campaign dubbed "StaryDobry" has been targeting gamers worldwide with trojanized versions of cracked games such as Garry's Mod, BeamNG.drive, and Dyson Sphere Program. #MalwareAttacks #Trojan #Gamers https://www.bleepingcomputer.com/news/security/cracked-garrys-mod-beamngdrive-games-infect-gamers-with-miners/

A new variant of the XCSSET macOS modular malware has emerged in attacks that target users' sensitive information, including digital wallets and data from the legitimate Notes app. #MalwareAttacks #cybersecurity https://www.bleepingcomputer.com/news/security/microsoft-spots-xcsset-macos-malware-variant-used-for-crypto-theft/