Trending Topics
CVE-2025-25257
Critical
FortiClientEMS
SQL injection vulnerability in FortiClientEMS versions 7.
ClickFix
Coverage of the ClickFix social engineering technique, in which fake CAPTCHA or verification pages trick victims into copying and pasting attacker-supplied commands into a terminal or Run dialog, bypassing traditional file-based delivery and detection.
Trending Topics
TRENDING TOPICS
JULY 23, 2025
Update: Coyote Banking Trojan Becomes First to
Trending Topics
UNG0002 deploys ClickFix and custom RATs (Shadow RAT, Inet RAT) across the Cobalt Whisper and AmberMist campaigns. Matanbuchus 3.0 abuses Microsoft Teams for initial access. Chinese APTs, including APT41-linked TA415, target Taiwan semiconductor firms.
Trending Topics
TRENDING TOPICS
JUNE 18, 2025
Update: Qilin Ransomware Targets Multiple Platforms with
Trending Topics
Fileless AsyncRAT spreads via fake CAPTCHA clicks. Scattered Spider (0ktapus, UNC3944, Scatter Swine, Starfraud, Muddled Libra) expands into U.S. insurance via social engineering and SIM swapping. Flodrix botnet exploits Langflow RCE for DDoS attacks.
Trending Topics
TRENDING TOPICS
JUNE 13, 2025
GitHub Device Code Flow is the New
The Rise of Interlock Ransomware Group
Ransomware Groups Comparison Chart
Detailed Analysis: Interlock, Rhysida & Vice Society
Characteristic
Trending Topics
TRENDING TOPICS
MAY 23, 2025
OpenPGP.js Flaw (CVE-2025-47934): Critical
Trending Topics
APT36 (Transparent Tribe) adapts ClickFix attacks to target Linux systems. APT37 targets North Korea-focused activists with fileless malware in Operation ToyBox Story. DPRK remote work fraud indictments reveal $88 million funneled through fake IT hires.
Trending Topics
TRENDING TOPICS
MAY 08, 2025
COLDRIVER Deploys LOSTKEYS Malware in Targeted Espionage
Trending Topics
TRENDING TOPICS
MAY 02, 2025
Update: MintsLoader and GhostWeaver Malware Campaigns Now
Trending Topics
Oracle legacy server breach prompts CISA advisory on credential reuse. SonicWall SMA flaw actively exploited, CISA mandates patching. Agent Tesla returns with fileless multi-stage delivery. TA427 (Kimsuky) and TA450 (MuddyWater) adopt ClickFix for state-sponsored phishing.