Hackers Use GitHub Pages for Phishing Attacks
Researchers have uncovered a sophisticated phishing campaign targeting banking customers in Mexico through a highly scalable and resilient attack infrastructure. The operation leverages GitHub Pages to host convincing phishing websites [...]
Sapphire Sleet Targets macOS With Multi-Stage Malware
Researchers have uncovered a new macOS malware campaign linked to the North Korean threat group known as Sapphire Sleet. The attackers are using fake software update files disguised as Zoom [...]
Rokarolla Android Malware Disables Google Play Protect to Gain Full Device Control
Security researchers have identified Rokarolla, a sophisticated Android malware that disables Google Play Protect and abuses accessibility services to gain extensive control over infected devices. Once deployed, the malware can facilitate remote access, steal sensitive information, and bypass built-in Android security protections.
UNC3753 Exploits Screen-Sharing Sessions and RMM Tools to Steal Sensitive Legal Data
UNC3753 is targeting legal organizations by exploiting screen-sharing sessions and RMM software to steal sensitive data. The campaign demonstrates the growing use of legitimate remote access tools in modern cyber espionage and data theft operations.
PRC-Linked Threat Actors Target REDCap Servers to Spy on U.S. Medical Research Organizations
PRC-linked hackers are targeting REDCap servers to conduct cyber espionage against U.S. medical research organizations. The campaign underscores the increasing risks facing healthcare, research, and academic sectors as threat actors seek access to valuable scientific and medical data.
FHN 
