Attackers are exploiting trust in Adobe’s brand to deliver covert remote access, using a fake Acrobat Reader download page to install ConnectWise ScreenConnect through a fileless, memory-heavy attack ...
PHANTOMPULSE spreads via Obsidian plugin abuse in REF6598 campaign, targeting finance and crypto users, bypassing AV controls ...
Cargo-stealing hackers have a new trick up their sleeve: using a third-party code-signing service makes their remote ...
The Computer Emergencies Response Team of Ukraine (CERT-UA) has disclosed details of a new campaign that has targeted ...
A digitally signed adware tool has deployed payloads running with SYSTEM privileges that disabled antivirus protections on ...