Ransomware & Malware

Ransomware & Malware

GlassWorm's Zig Dropper Turns Dev IDEs into Malware Hives

Your coding setup just became a hacker's playground. GlassWorm's latest trick uses a fake WakaTime extension to drop malware across every IDE on your machine.

5 min read 1 month, 1 week ago

Ransomware & Malware

Atomic Stealer Slips Past Apple's Terminal Guard Using Script Editor Sleight-of-Hand

A fake Apple popup on your Mac browser isn't just annoying—it's the new face of Atomic Stealer, tricking you into Script Editor instead of Terminal. Apple's security patch? Already outflanked.

5 min read 1 month, 1 week ago

Ransomware & Malware

Qilin, Akira, Dragonforce: Ransomware's Brutal Top Trio Claims 40% of March Carnage

Picture this: three ransomware crews unleashing chaos on 40% of last month's attacks. Qilin leads the pack at 20%, while the US eats over half the blows.

4 min read 1 month, 1 week ago

Ransomware & Malware

ChipSoft Ransomware Cripples Dutch Hospitals' EHR Backbone

Dutch hospitals are offline. ChipSoft's ransomware hit knocks out EHR systems, forcing manual ops and exposing healthcare's fragile IT underbelly.

4 min read 1 month, 1 week ago

Ransomware & Malware

LucidRook's Lua Stealth Assault on Taiwan's NGOs and Universities

A phishing email disguised as a government notice. Click. LucidRook unfolds its Lua payload, slipping past defenses in targeted hits on Taiwan. Cisco Talos warns: this is mature tradecraft at work.

4 min read 1 month, 1 week ago

Ransomware & Malware

LucidRook Unleashed: New Lua Malware Stalks Taiwan's NGOs in Stealthy Spear-Phishing

A shadowy group called UAT-10362 is phishing Taiwanese NGOs with archives hiding LucidRook, a Lua-powered beast that sidesteps defenses like a ghost in the machine. This isn't random spam—it's targeted espionage with tricks straight out of a cyber spy novel.

5 min read 1 month, 1 week ago

Ransomware & Malware

CPUID's Trusted Tools Turn Toxic: Hackers Poison CPU-Z and HWMonitor Downloads

A quick download for CPU specs just infected thousands with sophisticated malware. CPUID's API breach shows how even trusted diagnostics become hacker bait.

4 min read 1 month, 1 week ago

Ransomware & Malware

Hackers Hijack 1,000 ComfyUI Servers for a Stealthy Crypto Mining Empire

What if your AI image generator was secretly mining crypto for hackers? A new botnet's turning exposed ComfyUI servers into a profit machine, exploiting custom nodes with ruthless efficiency.

5 min read 1 month, 2 weeks ago

Ransomware & Malware

Qilin and Warlock's BYOVD Assault: Silencing 300+ EDRs in the Kernel

A sneaky DLL drops. Then, two rogue drivers rip through 300+ EDRs like tissue paper. Qilin and Warlock just redefined ransomware evasion.

4 min read 1 month, 2 weeks ago

Ransomware & Malware

Storm-1175's 16-Vulnerability Blitz Powers Medusa Ransomware Onslaught

Over three years, Storm-1175 exploited 16 vulnerabilities—including three zero-days—to unleash Medusa ransomware at breakneck speed. Healthcare orgs are bleeding, but who's cashing in?

5 min read 1 month, 2 weeks ago

🦠

Ransomware & Malware

Germany Names REvil and GandCrab Boss: Meet Daniil Shchukin

The ghost of ransomware past has a face: 31-year-old Daniil Shchukin, aka UNKN. Germany's BKA just doxxed the kingpin behind GandCrab and REvil, gangs that pioneered double extortion and billions in hauls.

5 min read 1 month, 2 weeks ago

Ransomware & Malware

Germany Names REvil's Ringleaders: 130 Attacks, €35M in Pain – Justice or Just a Whack-a-Mole?

Forget the headlines — this hits real German businesses that shelled out €1.9M or watched servers die. BKA's got names, but ransomware's hydra heads just grow back.

4 min read 1 month, 2 weeks ago