Cybersecurity researchers have uncovered a persistent, nine-month-long campaign utilizing the recently disclosed React2Shell vulnerability to build the RondoDox botnet. This sophisticated attack has systematically targeted Internet of Things (IoT) devices and web applications, enrolling them into a growing network of compromised systems. The campaign’s evolution highlights the increasing threat posed…

Researchers have uncovered a sophisticated and well-funded Chinese threat actor, dubbed DarkSpectre, responsible for infecting over 8.8 million users across Chrome, Edge, and Firefox browsers. This extensive malware operation spanned seven years, utilizing highly coordinated campaigns to achieve objectives ranging from consumer fraud to corporate espionage. The discovery, detailed by…

A new and sophisticated cybercrime tool named ErrTraffic is making waves in the dark web, empowering attackers to automate “ClickFix” attacks. This tool significantly lowers the barrier to entry for malicious actors, allowing them to trick unsuspecting users into executing harmful software on a wide range of devices, including Windows,…

A new variant of the GlassWorm malware has been discovered, shifting its focus from Windows to macOS users and distributing through malicious Visual Studio Code (VS Code) extensions. This sophisticated self-propagating worm, downloaded over 50,000 times from the Open VSX marketplace, employs advanced techniques like encrypted payloads, hardware wallet trojanization,…

Trust Wallet is investigating a significant security breach impacting its Google Chrome extension, revealed to have resulted in the theft of approximately $8.5 million in cryptocurrency assets due to a sophisticated supply chain attack. The hack, linked to the second iteration of the Shai-Hulud malware campaign in November 2025, compromised…

APT36 Malware Campaign Exploits Windows LNK Files to Target Indian Government Entities A sophisticated cyber threat group, known as APT36 or Transparent Tribe, has initiated a new malware campaign specifically targeting Indian government and strategic entities. This campaign leverages a well-known but often overlooked vulnerability within Windows operating systems by…

IBM has addressed a critical security vulnerability within its API Connect platform, allowing remote attackers to potentially bypass authentication mechanisms and gain unauthorized access. This significant flaw, identified as CVE-2025-13915, carries a severe CVSS score of 9.8 out of 10, highlighting its potential impact on organizations relying on API Connect…

Large Language Models (LLMs) like GPT-4o and Claude are being weaponized by threat actors to automate the creation of sophisticated cyberattacks. A recent study by researchers from the University of Luxembourg revealed that these advanced AI tools can be manipulated to generate functional exploit code for critical enterprise software, effectively…

Dark web forums are witnessing the emergence of a sophisticated new threat: an AI-enhanced metamorphic crypter named InternalWhisper x ImpactSolutions. Advertised by a threat actor known as ImpactSolutions, this advanced malware tool leverages artificial intelligence to dynamically rewrite malicious code, aiming to bypass security defenses like Windows Defender. This development…

Cybersecurity experts at ESET have issued a stark warning about the escalating threat of AI-driven malware, highlighting its rapid integration into sophisticated attack campaigns. According to ESET’s H2 2025 Threat Report, artificial intelligence is no longer a theoretical future threat but a present reality, with attackers actively employing AI to…

Cybercriminals are increasingly deploying sophisticated tools to bypass security defenses, as evidenced by the emergence of VOID KILLER. This malicious software, advertised by threat actor Crypt4You, operates at the kernel level to terminate antivirus (AV) and endpoint detection and response (EDR) processes, posing a significant threat to organizations. The tool’s…

A massive Magecart campaign is deploying over 50 malicious scripts to hijack online checkout and account creation flows, according to Source Defense Research. This sophisticated web skimming operation targets a global audience, intercepting a wide range of sensitive information from unsuspecting online shoppers and account holders. The evolving tactics highlight…