Month: April 2025
-
Lazarus Expands Malicious npm Campaign: 11 New Packages Add Malware Loaders and Bitbucket Payloads
North Korean threat actors have expanded their presence in the npm ecosystem, publishing additional malicious packages that deliver the BeaverTail…
-
Lazarus Expands Malicious npm Campaign: 11 New Packages Add Malware Loaders and Bitbucket Payloads
North Korean threat actors have expanded their presence in the npm ecosystem, publishing additional malicious packages that deliver the BeaverTail…
-
Grandoreiro Trojan Distributed via ContaboHosted Servers in Phishing Campaigns
Cybercriminals are reviving the Grandoreiro banking trojan, targeting users in Latin America and Europe through large-scale phishing campaigns. The malware…
-
Mining in Plain Sight: The VS Code Extension Cryptojacking Campaign
A sophisticated cryptomining campaign has been discovered targeting developers through seemingly legitimate VS Code extensions. The campaign, potentially reaching over…
-
Carding tool abusing WooCommerce API downloaded 34K times on PyPI
A newly discovered malicious PyPi package named ‘disgrasya’ that abuses legitimate WooCommerce stores for validating stolen credit cards has been…
-
OpenAI tests watermarking for ChatGPT-4o Image Generation model
OpenAI is reportedly testing a new ‘watermark’ for the Image Generation model, which is a part of the ChatGPT 4o…
-
Security Affairs newsletter Round 518 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free…
-
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 40
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape————————————————————————————————————————————-[CISA Releases…
-
Expert used ChatGPT-4o to create a replica of his passport in just 5 minutes bypassing KYC
A researcher used ChatGPT-4o to create a replica of his passport in just five minutes, realistic enough to deceive most…
-
Microsoft Strengthens Outlook’s Email Ecosystem to Protect Inboxes
Microsoft Outlook will enforce stricter authentication requirements for high-volume senders, impacting domains that send over 5,000 emails daily. These changes,…