Latrodectus is a Windows loader that downloads other malware, seen in phishing and ClickFix attacks. See what it does, how to ...

That old Java icon had a much bigger résumé than I gave it credit for.

Node.js is a standard server-side JavaScript runtime used by many companies, including Netflix and LinkedIn. According to W3Techs data, it is used by approximately 7.4% of websites with known web ...

XWorm is a remote access trojan for Windows sold to criminals. See what it can take, how it gets in, what abuse.ch shows in ...

A newly disclosed Microsoft Edge exploit chain combines logic vulnerabilities and Windows functionality to escape the browser ...

Hackers use fake Colombian court notices to trick organizations into installing XWorm, a remote access tool that enables PC ...

The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into ...

Hackers use fake PuTTY Google results to trick IT admins into installing trojanized Windows software that secretly deploys malware.

North Korean hackers linked to the Lazarus Group abused banking security software to deploy a layered malware toolkit against ...

CERT-UA found 100+ compromised sites using ClickFix lures to distribute LunexStealer to Windows search visitors.

Security researchers have disabled an abandoned Popcorn Time updater on 2 million systems to prevent malicious abuse.

A Google search for “claude mac” on or around October 5, 2026 could return a sponsored result that displayed bing.com as its web address and ended at a counterfeit Claude download page. The page ...