https://www.infosecurity-magazine.com/malware/ Copyright © 2026 Reed Exhibitions Ltd. All Rights Reserved. https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/ ZeroTokens gives phishing operators live control of victim sessions targeting 53 financial brands Tue, 25 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/zerotokens-phishing-real-time/ https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials Tue, 25 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/fake-recruiter-scams-corporate/ https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ Doubloon Dredger abused Notion and malicious PDFs to harvest Microsoft authentication tokens Mon, 24 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ https://www.infosecurity-magazine.com/news/agent-tesla-malware-evasion/ An Agent Tesla v4 malware campaign used novel emoji-based code obfuscation to evade detection, KnowBe4 has revealed Fri, 21 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/agent-tesla-malware-evasion/ https://www.infosecurity-magazine.com/news/def-con-attendees-persistent/ Huntress researcher explains how they were targeted by an elaborate and persistent phishing scam following Def Con Thu, 20 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/def-con-attendees-persistent/ https://www.infosecurity-magazine.com/news/maas-clickfix-errtraffic-cruciferra/ eSentire uncovered a malware campaign combining ClickFix lures with ErrTraffic and Cruciferra Wed, 19 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/maas-clickfix-errtraffic-cruciferra/ https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/ Grandoreiro is active after its 2024 disruption, with Mexico now accounting for 40% of detections Wed, 19 Aug 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/grandoreiro-mexico-dll-sideloading/ https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/ The FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter Wed, 19 Aug 2026 10:50:00 GMT https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/ https://www.infosecurity-magazine.com/news/cyber-incident-ut-san-antonio/ UT San Antonio has taken IT systems offline following a cyber incident, disrupting student registration and tuition payments days before term is due to resume Tue, 18 Aug 2026 11:20:00 GMT https://www.infosecurity-magazine.com/news/cyber-incident-ut-san-antonio/ https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/ Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit Tue, 18 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/threequarters-ransomware-attacks/ https://www.infosecurity-magazine.com/news/infostealers-17-billion/ Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026 Mon, 17 Aug 2026 07:30:00 GMT https://www.infosecurity-magazine.com/news/infostealers-17-billion/ https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/ Evooo1Bot is a newly observed botnet based on the Mirai framework but equipped with advanced features, turning edge devices into persistent proxies Fri, 14 Aug 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/new-linux-botnet-evooo1bot-victims/ https://www.infosecurity-magazine.com/news/macos-infostealer-spread-clickfix/ AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data Fri, 14 Aug 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/macos-infostealer-spread-clickfix/ https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/ Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it Thu, 13 Aug 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/ https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/ Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort Thu, 13 Aug 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/akira-affiliate-crashes-ransomware/ https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/ New WindRelay NFC malware paired with SpyNote RAT let a fraudster clone a card mid-call Wed, 12 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/windrelay-nfc-relay-spynote-rat/ https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/ Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit Wed, 12 Aug 2026 13:35:00 GMT https://www.infosecurity-magazine.com/news/lazarus-post-quantum-key-dream-job/ https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/ Gunra actors are using stealth to exfiltrate vast volumes of data from Microsoft services, US and Korean agencies have warned Wed, 12 Aug 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/gunra-ransomware-fortinet-flaws/ https://www.infosecurity-magazine.com/opinions/middle-east-cyber-spillover/ Western organizations face increased risk from cyber-attack disruption amid ongoing Middle East tensions Wed, 12 Aug 2026 11:15:00 GMT https://www.infosecurity-magazine.com/opinions/middle-east-cyber-spillover/ https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/ Six npm packages queried an Ethereum wallet to locate C2 infrastructure Tue, 11 Aug 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/npm-packages-ethereum-wallet-c2/ https://www.infosecurity-magazine.com/news/suisan-cyber-incident-government/ Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber incidents in the past week also Tue, 11 Aug 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/suisan-cyber-incident-government/ https://www.infosecurity-magazine.com/news/gobased-macos-malware-crypto-and/ A macOS malware variant has been detected stealing crypto, passwords and more Mon, 10 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/gobased-macos-malware-crypto-and/ https://www.infosecurity-magazine.com/news/ransomware-surges-july-q2-lull/ Finance, technology and healthcare sectors were particularly heavily targeted in July, according to Comparitech Fri, 07 Aug 2026 08:20:00 GMT https://www.infosecurity-magazine.com/news/ransomware-surges-july-q2-lull/ https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ Attackers used SQL injection to compile a post-exploitation toolkit inside an Oracle database Thu, 06 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/khunt-toolkit-oracle-database-sql/ https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/ Oligo Security has linked TeamPCP to ShadowRay 2.0 and to cryptojacking infrastructure dating back to 2020 Thu, 06 Aug 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/teampcp-shadowray-ta-natalstatus/ https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/ 77 counterfeit Open VSX extensions beaconed to one domain, 19 harvesting git and CI identity Wed, 05 Aug 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/open-vsx-evil-twin-extensions-git/ https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/ A new npm worm has compromised packages with over two billion monthly installs Wed, 05 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/chaindrop-worm-400-npm-two-billion/ https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/ Talos read attacker prompt logs and found guardrails fell to task splitting and ownership claims Tue, 04 Aug 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/talos-attackers-split-tasks-evade/ https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/ Cloud and SaaS are now the preferred operating environments for threat actors, amid a continued shift to identity attacks Tue, 04 Aug 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/ https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/ Interpol claims AI is driving a surge in cybercrime in Africa, with related losses doubling Tue, 04 Aug 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ai-accounts-over-half-cybercrime/ https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/ Russian actor Storm-2945 hijacked hotel captive portals to push fake updates and steal tokens Mon, 03 Aug 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/captivecrunch-midnight-blizzard/ https://www.infosecurity-magazine.com/news/hollowframe-fake-python-dll/ New HollowFrame loader hid Go code in a fake Python DLL after pre-staging Defender exclusions Mon, 03 Aug 2026 11:26:00 GMT https://www.infosecurity-magazine.com/news/hollowframe-fake-python-dll/ https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/ Cryptomining crew abandoned root to impersonate low-privileged Linux users and evade SOC alerts Thu, 30 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/xmrig-linux-pam-forensic/ https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/ AiTM phishing is now the top entry point into law firms, with identity behind 56% of threats Thu, 30 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/aitm-phishing-top-entry-point-law/ https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/ LogoKit now builds per-victim phishing pages using live screenshots of the target's real website Wed, 29 Jul 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/logokit-phishing-real-time/ https://www.infosecurity-magazine.com/news/ta488-outlook-half-click-owareaper/ TA488 returned with OWA half-click exploit deploying OWAReaper implant that survived re-imaging Wed, 29 Jul 2026 15:10:00 GMT https://www.infosecurity-magazine.com/news/ta488-outlook-half-click-owareaper/ https://www.infosecurity-magazine.com/news/university-ransomware-attacks-rise/ Comparitech’s analysis of incidents in the first half of 2026 finds that the emergence of The Gentlemen ransomware has resulted in surge in attacks against higher education Fri, 24 Jul 2026 09:15:00 GMT https://www.infosecurity-magazine.com/news/university-ransomware-attacks-rise/ https://www.infosecurity-magazine.com/news/ai-boosts-ransomware-effectiveness/ A new study of organizations which have fallen victim to ransomware suggests the rise of AI-tools being used by hackers is making life harder for defenders Thu, 23 Jul 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/ai-boosts-ransomware-effectiveness/ https://www.infosecurity-magazine.com/news/trickbot-dns-tunneling-c2/ New TrickBot variant hides C2 communication inside DNS queries, replacing decade-old HTTP pattern Wed, 22 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/trickbot-dns-tunneling-c2/ https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/ Russian-speaking actor Trim built a commercial offensive AI pentest tool on jailbroken Claude models Tue, 21 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/trim-jailbroken-claude-ai-pentest/ https://www.infosecurity-magazine.com/news/new-ransomware-weekly/ Analysis by Black Kite warns that ransomware ecosystem is becoming bigger and more fragmented Tue, 21 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/new-ransomware-weekly/ https://www.infosecurity-magazine.com/news/cruciferra-crypter-process-ghosting/ Cruciferra crypter used process ghosting and 90 custom ciphers to hide payloads for multiple actors Mon, 20 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cruciferra-crypter-process-ghosting/ https://www.infosecurity-magazine.com/news/jadepuffer-ai-model-ransomware/ JadePuffer follow-up campaign deployed ENCFORGE locker built to destroy AI model artifacts Mon, 20 Jul 2026 14:05:00 GMT https://www.infosecurity-magazine.com/news/jadepuffer-ai-model-ransomware/ https://www.infosecurity-magazine.com/news/hollowgraph-microsoft-calendars/ Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and Microsoft Graph APIs as a stealthy C2 channel Mon, 20 Jul 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/hollowgraph-microsoft-calendars/ https://www.infosecurity-magazine.com/news/government-ransomware-daily/ Government organizations are targeted by attackers who know agencies cannot afford disruption to public services Fri, 17 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/government-ransomware-daily/ https://www.infosecurity-magazine.com/news/the-gentlemen-most-prolific/ Analysis of ransomware incidents by ReliaQuest indicates a shift in the ransomware landscape Fri, 17 Jul 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/the-gentlemen-most-prolific/ https://www.infosecurity-magazine.com/news/phishing-lua-loader-truetype-font/ Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers Thu, 16 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/phishing-lua-loader-truetype-font/ https://www.infosecurity-magazine.com/news/clicklock-macos-stealer-clickfix/ New ClickLock macOS stealer locked victims out of their own system until they surrendered a password Thu, 16 Jul 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/clicklock-macos-stealer-clickfix/ https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/ Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims Wed, 15 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/seasonalinvite-phishing-ecards-rmm/ https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/ Research of incidents by Sophos finds that phishing, brute force attacks and other identity-based threats have surpassed software vulnerabilities as means of delivering ransomware Wed, 15 Jul 2026 12:45:00 GMT https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/ https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/ Researchers at Jamf Threat Labs detail CrashStealer, which steals passwords, cryptocurrency wallets and more Tue, 14 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/macos-malware-apple-crash-reporter/ https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ Misconfigured server exposed three phishing operators running Evilginx forks to bypass MFA Mon, 13 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/open-directory-exposes-evilginx/ https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/ Chinese and Indian spies converged on the same Balochistan police force, SentinelLabs found Mon, 13 Jul 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/chinese-indian-espionage-pakistani/ https://www.infosecurity-magazine.com/news/hacker-extradited-ukraine-guilty/ An Armenian man has pleaded guilty to his role in the infamous Ryuk ransomware operation Mon, 13 Jul 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/hacker-extradited-ukraine-guilty/ https://www.infosecurity-magazine.com/news/new-gigawiper-espionage-destructive/ A new multi-purpose backdoor allows cyber threat actors to conduct both quiet espionage activity and destructive wiping operations Fri, 10 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/new-gigawiper-espionage-destructive/ https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/ GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel driver Fri, 10 Jul 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/ https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/ Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network Thu, 09 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/vibe-coded-malware-ai-powershell/ https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/ Zimperium found RedWing, an Android spyware sold as a service via Telegram to target banking apps Wed, 08 Jul 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/redwing-android-spyware-maas/ https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/ Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware Wed, 08 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/uat-7810-china-apt-orb-proxy/ https://www.infosecurity-magazine.com/news/new-campaign-vidar-stealer-monero/ Cyber threat actors are infecting victims with the Vidar stealer and the XMRig cryptocurrency miner in a new malicious campaign Wed, 08 Jul 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/new-campaign-vidar-stealer-monero/ https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/ A suspected Chinese threat cluster is exploiting Roundcube vulnerabilities to compromise university networks in the US and Canada and harvest user credentials Tue, 07 Jul 2026 15:40:00 GMT https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/ https://www.infosecurity-magazine.com/news/scattered-spider-as-cybercrime/ Group-IB analysis argued Scattered Spider is a decentralized collective of independent clusters Tue, 07 Jul 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/scattered-spider-as-cybercrime/ https://www.infosecurity-magazine.com/news/exploit-maximum-severity-adobe/ Threat actors are exploiting an Adobe ColdFusion vulnerability which has a CVSS score of 10.0 Tue, 07 Jul 2026 08:20:00 GMT https://www.infosecurity-magazine.com/news/exploit-maximum-severity-adobe/ https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/ Zscaler found sites hiding prompt-injection text to manipulate AI agents into crypto payments Mon, 06 Jul 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/indirect-prompt-injection-web/ https://www.infosecurity-magazine.com/news/researchers-first-agentic/ Researchers have revealed JadePuffer, the first agentic AI-powered ransomware campaign, highlighting how autonomous agents can automate cyber-attacks Mon, 06 Jul 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/researchers-first-agentic/ https://www.infosecurity-magazine.com/news/industrialized-cyberattacks/ Researchers warn that collaboration could lead to “unprecedented” ransomware attacks, as FBI also issues warning Fri, 03 Jul 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/industrialized-cyberattacks/ https://www.infosecurity-magazine.com/news/cybercriminals-pose-interpol/ Bitdefender researchers warned of curious ransomware campaign which has targeted businesses around the world Thu, 02 Jul 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/cybercriminals-pose-interpol/ https://www.infosecurity-magazine.com/news/scattered-spider-member-extradited/ A teenager accused of hacking as part of Scattered Spider has been arrested Thu, 02 Jul 2026 08:45:00 GMT https://www.infosecurity-magazine.com/news/scattered-spider-member-extradited/ https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/ Securonix said the Veil#Drop campaign abuses Google Blogspot to deliver PureLog Stealer in memory Wed, 01 Jul 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/veil-drop-blogspot-purelog-stealer/ https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/ FortiGuard says the Brazilian banking trojan Ousaban is targeting Spain and Portugal via phishing Wed, 01 Jul 2026 13:45:00 GMT https://www.infosecurity-magazine.com/news/ousaban-banking-trojan-spain/ https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/ Nissan says employees' data was stolen via the Oracle PeopleSoft zero-day campaign Tue, 30 Jun 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/nissan-oracle-peoplesoft-zero-day/ https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/ Attackers exploited a critical SimpleHelp RMM bug to deploy TaskWeaver and Djinn Stealer malware Tue, 30 Jun 2026 15:34:00 GMT https://www.infosecurity-magazine.com/news/simplehelp-rmm-vulnerability/ https://www.infosecurity-magazine.com/news/uk-healthcare-tenfold-increase/ SonicWall records 264,000 events in first five months of 2026 as UK hospitals come under siege Tue, 30 Jun 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/uk-healthcare-tenfold-increase/ https://www.infosecurity-magazine.com/news/over-300-uk-firms-hit-ransomware/ Report Fraud data reveals that more than half of 323 UK ransomware victims last year were SMEs Tue, 30 Jun 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/over-300-uk-firms-hit-ransomware/ https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/ Group-IB says Millenium RAT, now rewritten in C++, has hit 62,289 devices in 160+ countries Mon, 29 Jun 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/ https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/ Digital Citizens Alliance report claims that millions of Americans may have unwittingly had IP connections used by cybercriminals Thu, 25 Jun 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/ https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/ macos-xpc-flaw-disable-edr-mdm-standard-user-xm-cyber Thu, 25 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/ https://www.infosecurity-magazine.com/news/increase-ransomware-europe/ Analysis of ransomware incidents by researchers at Black Kite found that attacks have risen by over 50% in the last year, with supply chain attacks increasing Thu, 25 Jun 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/increase-ransomware-europe/ https://www.infosecurity-magazine.com/news/operation-endgame-stealc-amadey/ Operation Endgame seized around 50 domains and nearly 200 active IP-based servers associated with the infostealers Wed, 24 Jun 2026 15:25:00 GMT https://www.infosecurity-magazine.com/news/operation-endgame-stealc-amadey/ https://www.infosecurity-magazine.com/news/macos-gaslight-rust-backdoor/ SentinelLabs found a North Korea-linked macOS backdoor using prompt injection on AI triage tools Wed, 24 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/macos-gaslight-rust-backdoor/ https://www.infosecurity-magazine.com/news/iranlinked-muddywater-poses-as/ An NCC Group report warns state-backed hackers are attempting to hide activity by posing as ransomware groups and deploying commercially available malware Wed, 24 Jun 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/iranlinked-muddywater-poses-as/ https://www.infosecurity-magazine.com/news/ai-attacks-cheaper-faster-covert/ New ReliaQuest study reveals the six ways AI is practically being used in attacks today Wed, 24 Jun 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/ai-attacks-cheaper-faster-covert/ https://www.infosecurity-magazine.com/news/mps-criticize-government-museum/ Public Accounts Committee (PAC) warns that museums and galleries aren’t getting enough government support on cyber Wed, 24 Jun 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/mps-criticize-government-museum/ https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/ JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT Tue, 23 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/ https://www.infosecurity-magazine.com/news/gentlekiller-gentlemen-ransomware/ ESET details GentleKiller, the EDR-killer framework the Gentlemen ransomware gang gives affiliates Mon, 22 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/gentlekiller-gentlemen-ransomware/ https://www.infosecurity-magazine.com/news/operation-endgame-socgholish-evil/ SocGholish malware has been removed from 15,000 sites associated with Evil Corp hackers Fri, 19 Jun 2026 10:15:00 GMT https://www.infosecurity-magazine.com/news/operation-endgame-socgholish-evil/ https://www.infosecurity-magazine.com/news/crypto-clipboard-hijacker-fake/ A Rust crypto clipper hides behind fake GitHub stars and AI-narrated YouTube videos Thu, 18 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/crypto-clipboard-hijacker-fake/ https://www.infosecurity-magazine.com/news/cybercriminals-worried-ai-take/ Analysis of chatter on underground forums by Sophos finds that hackers fear AI could take work away from them Thu, 18 Jun 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/cybercriminals-worried-ai-take/ https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/ CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs Thu, 18 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/operation-escaneo-cloudsek-latam/ https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/ GitBait phishing kit abuses GitHub Pages and the SheetBest API to steal Mexican banking credentials Wed, 17 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/gitbait-github-pages-sheetbest/ https://www.infosecurity-magazine.com/news/sprysocks-backdoor-windows/ China-linked SprySOCKS backdoor gains stealthy Windows variants and 30-plus C2 commands Tue, 16 Jun 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/sprysocks-backdoor-windows/ https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/ Rokarolla Android trojan steals banking logins and spies on victims while blocking fraud alerts Tue, 16 Jun 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/ https://www.infosecurity-magazine.com/news/dragonforce-ransomware-hidden/ Command and control traffic exploited a Teams visitor token to make malicious activity look legitimate to defenders Tue, 16 Jun 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/dragonforce-ransomware-hidden/ https://www.infosecurity-magazine.com/news/wordpress-plugin-supply-chain/ Tampered OptinMonster and sister plugins plant hidden backdoors on 1.2 million WordPress sites Mon, 15 Jun 2026 17:00:00 GMT https://www.infosecurity-magazine.com/news/wordpress-plugin-supply-chain/ https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/ How the Anubis ransomware group stole and leaked an Italian Adriatic port authority's data Mon, 15 Jun 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/anubis-ransomware-adriatic-port/ https://www.infosecurity-magazine.com/news/fake-ai-guides-dev-tools-spread/ Fake AI guides hide a multi-stage chain that drops AsyncRAT, with signs of AI-assisted coding Thu, 11 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/fake-ai-guides-dev-tools-spread/ https://www.infosecurity-magazine.com/news/extortion-only-attacks-surge/ Extortion-only attacks are increasing as data theft drives most ransomware claims, with many organizations unable to stop stolen data from being exposed Thu, 11 Jun 2026 10:20:00 GMT https://www.infosecurity-magazine.com/news/extortion-only-attacks-surge/ https://www.infosecurity-magazine.com/news/fake-software-videos-tiktok-vidar/ Threat actors push fake free-software tutorials on TikTok and Instagram to spread Vidar stealer Wed, 10 Jun 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/fake-software-videos-tiktok-vidar/ https://www.infosecurity-magazine.com/news/silabrat-trojan-session-hijacking/ MaaS trojan SilabRAT uses HVNC and browser cloning to hijack sessions and steal crypto Wed, 10 Jun 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/silabrat-trojan-session-hijacking/ https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/ North Korean actor UNK_DeadDrop targeted developers with fake coding tasks to steal crypto Mon, 08 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/ https://www.infosecurity-magazine.com/news/ta4922-global-expansion/ Newly named Chinese-speaking actor TA4922 expands from East Asia into Europe and Africa Thu, 04 Jun 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ta4922-global-expansion/ https://www.infosecurity-magazine.com/news/cybercrime-ai-tools-surge-3800/ Halcyon’s Cynthia Kaiser lifts the lid on the dark web market for AI cybercrime tools Wed, 03 Jun 2026 07:30:00 GMT https://www.infosecurity-magazine.com/news/cybercrime-ai-tools-surge-3800/ https://www.infosecurity-magazine.com/news/cybersecurity-teams-doomed-to-fail/ Humans still need to be part of cyber defense, but refusing to deploy AI is no longer optional against AI-enhanced cyber threats, warns Dataminr’s Joe Slowik Tue, 02 Jun 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-teams-doomed-to-fail/ https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/ A threat actor used AI coding tools to build and test EDR evasion malware, Sophos finds Tue, 02 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/ai-edr-evasion-tooling/ https://www.infosecurity-magazine.com/news/red-hat-npm-scope-backdoored/ Attackers backdoored 32 packages in Red Hat's official npm scope to steal cloud and CI secrets Tue, 02 Jun 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/red-hat-npm-scope-backdoored/ https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/ FSB-linked Gamaredon concealed a fileless worm in NTFS data streams to spy on Ukraine targets Mon, 01 Jun 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/gamaredon-worm-ntfs-data-streams/ https://www.infosecurity-magazine.com/news/ai-npm-malware-leaks-github-token/ Sloppy AI-generated npm infostealer leaked its own GitHub token, exposing the operator Fri, 29 May 2026 08:10:00 GMT https://www.infosecurity-magazine.com/news/ai-npm-malware-leaks-github-token/ https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/ Most malicious open source packages now mimic real code rather than rely on typosquatting Thu, 28 May 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/attackers-beyond-typosquatting/ https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/ New actor Jinx-0164 hit crypto developers with fake recruiter lures and macOS malware Thu, 28 May 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/jinx-0164-crypto-developers-macos/ https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/ Group-IB uncovered Ghost Stadium phishing and 4300 fake FIFA World Cup domains targeting fans Wed, 27 May 2026 11:28:00 GMT https://www.infosecurity-magazine.com/news/ghost-stadium-fifa-world-cup-fraud/ https://www.infosecurity-magazine.com/news/purelogs-phishing-purchase-order/ FortiGuard Labs detailed a PureLogs campaign using JavaScript, PowerShell and process hollowing Wed, 27 May 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/purelogs-phishing-purchase-order/ https://www.infosecurity-magazine.com/news/btmob-android-rat-maas-builder/ BTMOB Android RAT sold as a service with a no-code builder for fast, regional phishing lures Tue, 26 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/btmob-android-rat-maas-builder/ https://www.infosecurity-magazine.com/news/iranian-hackers-us-aviation/ Iran's Nimbus Manticore pushes AI-built MiniFast backdoor via phishing and SEO poisoning Tue, 26 May 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/iranian-hackers-us-aviation/ https://www.infosecurity-magazine.com/news/gemini-claude-infostealers-seo/ The infostealer payload in this campaign collect a vast amount of data, from collaboration authentication keys to cryptocurrency wallets Fri, 22 May 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/gemini-claude-infostealers-seo/ https://www.infosecurity-magazine.com/news/first-vpn-takedown-europol/ First VPN, a service used by ransomware actors and fraudsters, was dismantled by Europol Thu, 21 May 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/first-vpn-takedown-europol/ https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/ Premium Deception campaign uses 250 Android apps to silently sign victims up to paid services Wed, 20 May 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/android-carrier-billing-fraud-four/ https://www.infosecurity-magazine.com/news/antv-npm-mini-shai-hulud-largest/ Mini Shai-Hulud worm hits Alibaba AntV ecosystem in largest npm supply chain wave to date Wed, 20 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/antv-npm-mini-shai-hulud-largest/ https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/ Verizon DBIR finds 31% of data breaches began with software flaws last year Wed, 20 May 2026 08:40:00 GMT https://www.infosecurity-magazine.com/news/verizon-dbir-exploits-top-access/ https://www.infosecurity-magazine.com/news/microsoft-takes-down-fox-tempest/ Microsoft’s Digital Crimes Unit has taken down the infrastructure of Fox Tempest, a prolific cybercrime-enabling threat group Tue, 19 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/microsoft-takes-down-fox-tempest/ https://www.infosecurity-magazine.com/news/china-hackers-tencshell-malware/ A suspected China-linked threat actor targeted the Indian branch of a global manufacturer leveraging an open source offensive toolkit Fri, 15 May 2026 08:00:00 GMT https://www.infosecurity-magazine.com/news/china-hackers-tencshell-malware/ https://www.infosecurity-magazine.com/news/google-launches-android-spyware/ Google’s Android Advanced Protection Mode is getting a new feature allowing trusted security experts to investigate potential spyware infections Thu, 14 May 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/google-launches-android-spyware/ https://www.infosecurity-magazine.com/news/canvas-cybercriminals-agreement/ Instructure says it reached an agreement with ShinyHunters over the Canvas breach data Wed, 13 May 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/canvas-cybercriminals-agreement/ https://www.infosecurity-magazine.com/opinions/the-first-24-hours-responding-to/ CISO Zach Lewis details what happened when ransomware hit his organization - and how they responded the attack Wed, 13 May 2026 13:30:00 GMT https://www.infosecurity-magazine.com/opinions/the-first-24-hours-responding-to/ https://www.infosecurity-magazine.com/news/ransomware-over-half-cisos-would/ Survey of cybersecurity leaders suggests that majority would strongly consider paying cybercriminals, if that’s what it took to help restore encrypted systems Wed, 13 May 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/ransomware-over-half-cisos-would/ https://www.infosecurity-magazine.com/news/mini-shai-hulud-tanstack-npm/ Mini Shai-Hulud compromises TanStack npm packages and spreads across PyPI Tue, 12 May 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/mini-shai-hulud-tanstack-npm/ https://www.infosecurity-magazine.com/news/south-staffordshire-water-fined-1m/ The ICO has fined South Staffordshire Water nearly £1m for a series of data protection failings Tue, 12 May 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/south-staffordshire-water-fined-1m/ https://www.infosecurity-magazine.com/news/trickmo-c-ton-network-android/ ThreatFabric finds new TrickMo Android banking trojan variant routing C2 through The Open Network Mon, 11 May 2026 15:15:00 GMT https://www.infosecurity-magazine.com/news/trickmo-c-ton-network-android/ https://www.infosecurity-magazine.com/news/fake-claude-code-installer/ Ontinue uncovers fake Claude Code installer pushing PowerShell stealer abusing Chrome's IElevator2 Mon, 11 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/fake-claude-code-installer/ https://www.infosecurity-magazine.com/news/australian-cyber-security-centre/ ACSC warns over a campaign targeting organizations which uses ClickFix to deliver Vidar infostealer malware Fri, 08 May 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/australian-cyber-security-centre/ https://www.infosecurity-magazine.com/news/pcpjack-campaign-boots-teampcp-off/ SentinelOne believes the PCPJack campaign may be the brainchild of a former TeamPCP member Fri, 08 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/pcpjack-campaign-boots-teampcp-off/ https://www.infosecurity-magazine.com/news/fake-claude-site-beagle-backdoor/ Sophos finds fake Claude site spreading DonutLoader and a new Beagle backdoor via DLL sideloading Thu, 07 May 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/fake-claude-site-beagle-backdoor/ https://www.infosecurity-magazine.com/news/daemon-tools-confirms-software/ A China-linked threat actor backdoored a version of Daemon Tools to infect thousands Thu, 07 May 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/daemon-tools-confirms-software/ https://www.infosecurity-magazine.com/news/cloudz-rat-pheno-phone-link-otp/ Cisco Talos uncovers CloudZ RAT and Pheno plugin abusing Microsoft Phone Link to intercept SMS OTPs Wed, 06 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cloudz-rat-pheno-phone-link-otp/ https://www.infosecurity-magazine.com/opinions/lessons-learned-from-colonial/ In May 2021, a coordinated government response helped contain the ransomware attack that disrupted America’s gas supply. Are we ready for the next major attack against critical infrastructure? Wed, 06 May 2026 13:30:00 GMT https://www.infosecurity-magazine.com/opinions/lessons-learned-from-colonial/ https://www.infosecurity-magazine.com/news/iran-linked-apt-chaos-ransomware/ Rapid7 reveals an Iranian false flag operation masquerading as a Chaos ransomware attack Wed, 06 May 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/iran-linked-apt-chaos-ransomware/ https://www.infosecurity-magazine.com/news/scarcruft-birdcall-android-yanbian/ ESET warns that North Korean hackers compromised a Yanbian gaming site in a supply‑chain attack, trojanizing Windows and Android software to spy on users Tue, 05 May 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/scarcruft-birdcall-android-yanbian/ https://www.infosecurity-magazine.com/news/ssa-emails-venomous-helper-phishing/ Venomous#Helper attackers impersonate the US Social Security Administration to deploy signed RMM software and maintain persistent access across US networks Tue, 05 May 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ssa-emails-venomous-helper-phishing/ https://www.infosecurity-magazine.com/opinions/ai-attacks-not-new-but-are-faster/ The fundamentals of compromise have not changed, but with AI, the pace of exploitation has Mon, 04 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/ai-attacks-not-new-but-are-faster/ https://www.infosecurity-magazine.com/news/cybersecurity-workers-jailed/ The cybersecurity workers used their knowledge and skills to conduct ransomware attacks for notorious gang, rather than protect victims against them Fri, 01 May 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/cybersecurity-workers-jailed/ https://www.infosecurity-magazine.com/opinions/adapt-defenses-to-protect-against/ Democratization of cybercrime is driving PhaaS expansion. Here's what you need to know to protect your network Fri, 01 May 2026 09:00:00 GMT https://www.infosecurity-magazine.com/opinions/adapt-defenses-to-protect-against/ https://www.infosecurity-magazine.com/news/three-arrested-over-roblox-hacking/ Suspects accused of distributing malware and selling access to stolen Roblox accounts on Russian marketplaces Thu, 30 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/three-arrested-over-roblox-hacking/ https://www.infosecurity-magazine.com/news/deepdoor-python-backdoor-windows/ Deep#Door Python RAT uses tunneling and obfuscation to evade detection and steal credentials Thu, 30 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/deepdoor-python-backdoor-windows/ https://www.infosecurity-magazine.com/news/uk-education-sector-faces-surge-in/ The British public education sector has faced the nation’s most dramatic increase in cyber breach prevalence over the past year Thu, 30 Apr 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/uk-education-sector-faces-surge-in/ https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/ Cursor flaw lets extensions steal API keys and session tokens without user interaction, according to researchers at LayerX Wed, 29 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/ https://www.infosecurity-magazine.com/news/ai-npm-dependency-targets-crypto/ Researchers uncover a malicious npm dependency linked to an AI‑assisted code commit that steals sensitive data and exposes crypto wallets Wed, 29 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/ai-npm-dependency-targets-crypto/ https://www.infosecurity-magazine.com/news/29-billion-compromised-credentials/ KELA claims infostealers remained the primary access vector for attacks in 2025 Wed, 29 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/29-billion-compromised-credentials/ https://www.infosecurity-magazine.com/news/critical-flaw-vect-ransomware-data/ The Vect 2.0 ransomware wipes large files instead of merely encrypting them, making recovery impossible – even for the attackers Wed, 29 Apr 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/critical-flaw-vect-ransomware-data/ https://www.infosecurity-magazine.com/news/medtronic-data-breach-shinyhunters/ Medtronic confirms IT breach as ShinyHunters claims millions of records accesseda Tue, 28 Apr 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/medtronic-data-breach-shinyhunters/ https://www.infosecurity-magazine.com/news/ransomware-turf-war-0apt-krybit/ Ransomware groups 0APT and KryBit have doxxed each other online Tue, 28 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-turf-war-0apt-krybit/ https://www.infosecurity-magazine.com/news/chinese-national-extradited-silk/ Extradition links alleged MSS-directed hacker to Silk Typhoon and COVID-19 espionage Tue, 28 Apr 2026 12:30:00 GMT https://www.infosecurity-magazine.com/news/chinese-national-extradited-silk/ https://www.infosecurity-magazine.com/news/fast16-sabotage-malware-winds/ The “fast16” malware may have been used to target Iran’s nuclear program prior to Stuxnet Mon, 27 Apr 2026 09:10:00 GMT https://www.infosecurity-magazine.com/news/fast16-sabotage-malware-winds/ https://www.infosecurity-magazine.com/news/npm-supply-chain-worm-canister/ Malicious npm packages spread via worm-like propagation and steal developer credentials Fri, 24 Apr 2026 08:10:00 GMT https://www.infosecurity-magazine.com/news/npm-supply-chain-worm-canister/ https://www.infosecurity-magazine.com/news/cyberattacks-surge-63-annually/ Quorum Cyber report finds higher and further education institutions experienced 63% increase in attacks over a year Thu, 23 Apr 2026 10:30:00 GMT https://www.infosecurity-magazine.com/news/cyberattacks-surge-63-annually/ https://www.infosecurity-magazine.com/news/macos-lotl-techniques-enterprise/ macOS LOTL techniques bypass detection using native tools and metadata abuse Wed, 22 Apr 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/macos-lotl-techniques-enterprise/ https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/ Null subject phishing campaigns bypass filters and target VIPs with QR code and RMM abuse Wed, 22 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/silent-subject-phishing-campaigns/ https://www.infosecurity-magazine.com/news/former-ransomware-negotiator/ A former ransomware negotiator has pleaded guilty to abusing his position by working with noted cybercrime group BlackCat Wed, 22 Apr 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/former-ransomware-negotiator/ https://www.infosecurity-magazine.com/news/trojanized-android-handle-nfc/ NGate malware abuses HandyPay app to steal NFC card data and PINs in Brazil Tue, 21 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/trojanized-android-handle-nfc/ https://www.infosecurity-magazine.com/news/gentlemen-ransomware-rapid/ Gentlemen RaaS expands quickly with multi-platform attacks and SystemBC-linked infections Tue, 21 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/gentlemen-ransomware-rapid/ https://www.infosecurity-magazine.com/news/zionsiphon-malware-water/ ZionSiphon malware targets OT water systems with sabotage and ICS scanning capabilities Mon, 20 Apr 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/zionsiphon-malware-water/ https://www.infosecurity-magazine.com/news/formbook-malware-multiple/ Formbook attacks use combination of DLL Side-Loading and Obfuscated JavaScript to stay hidden, researchers at WatchGuard have uncovered Mon, 20 Apr 2026 15:01:00 GMT https://www.infosecurity-magazine.com/news/formbook-malware-multiple/ https://www.infosecurity-magazine.com/news/mirai-variant-dvr-flaw-iot-botnet/ FortiGuard Labs has identified a Mirai-based Nexcorium campaign actively exploiting CVE-2024-3721 in TBK DVR devices Mon, 20 Apr 2026 13:01:00 GMT https://www.infosecurity-magazine.com/news/mirai-variant-dvr-flaw-iot-botnet/ https://www.infosecurity-magazine.com/news/apk-malformation-android-malware/ APK malformation tactic now appears in over 3000 Android malware samples evading static analysis Thu, 16 Apr 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/apk-malformation-android-malware/ https://www.infosecurity-magazine.com/news/cookeville-medical-center-data/ Tennessee's CRMC notifies over 337,000 patients of Rhysida ransomware breach exposing sensitive data Thu, 16 Apr 2026 15:01:00 GMT https://www.infosecurity-magazine.com/news/cookeville-medical-center-data/ https://www.infosecurity-magazine.com/news/automotive-ransomware-attacks/ Halcyon says ransomware now accounts for more than two-fifths of cyber-attacks targeting carmakers Thu, 16 Apr 2026 08:35:00 GMT https://www.infosecurity-magazine.com/news/automotive-ransomware-attacks/ https://www.infosecurity-magazine.com/news/dragon-boss-adware-disables/ Huntress uncovers adware deploying AV-killing payloads via signed updates across 23,000 endpoints Wed, 15 Apr 2026 14:40:00 GMT https://www.infosecurity-magazine.com/news/dragon-boss-adware-disables/ https://www.infosecurity-magazine.com/news/triad-nexus-expands-fraud/ Triad Nexus scales $200m scams, uses infrastructure laundering, localized fraud and US-access blocks Tue, 14 Apr 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/triad-nexus-expands-fraud/ https://www.infosecurity-magazine.com/news/chrome-extensions-expose-user-data/ 108 malicious Chrome extensions steal sessions, Google data, inject ads via single C2 infrastructure Tue, 14 Apr 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/chrome-extensions-expose-user-data/ https://www.infosecurity-magazine.com/news/mirax-trojan-devices-proxy-nodes/ Security researchers warn of Mirax, an emerging Android banking trojan using MaaS, remote access and residential proxies to target European users Mon, 13 Apr 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/mirax-trojan-devices-proxy-nodes/ https://www.infosecurity-magazine.com/news/three-ransomware-gangs-40-percent/ Qilin, Akira and Dragonforce were responsible for 40% of 672 ransomware incidents reported in March, says Check Point Fri, 10 Apr 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/three-ransomware-gangs-40-percent/ https://www.infosecurity-magazine.com/news/google-chrome-protection/ Chrome’s Device Bound Session Credentials is designed to block infostealers from harvesting session cookie Fri, 10 Apr 2026 11:25:00 GMT https://www.infosecurity-magazine.com/news/google-chrome-protection/ https://www.infosecurity-magazine.com/news/stx-rat-targets-finance-sector/ STX RAT, a newly identified remote access trojan, attempted deployment in finance, showing advanced C2 and stealthy delivery methods Thu, 09 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/stx-rat-targets-finance-sector/ https://www.infosecurity-magazine.com/news/atomic-stealer-macos-clickfix/ macOS 26.4 update introduced security warnings into Terminal to prevent ClickFix attacks, so attackers have shifted to Script Editor instead Thu, 09 Apr 2026 11:20:00 GMT https://www.infosecurity-magazine.com/news/atomic-stealer-macos-clickfix/ https://www.infosecurity-magazine.com/news/middle-east-hack-operation-bitter/ A spear-phishing campaign which spread across the Middle East between 2023 and 2024 has now been linked to Bitter APT group Thu, 09 Apr 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/middle-east-hack-operation-bitter/ https://www.infosecurity-magazine.com/news/iranbacked-hackers-cni-ot-assets/ CISA has revealed Iranian attacks causing disruption and financial loss at US critical infrastructure firms Wed, 08 Apr 2026 08:15:00 GMT https://www.infosecurity-magazine.com/news/iranbacked-hackers-cni-ot-assets/ https://www.infosecurity-magazine.com/news/grafanaghost-silent-data/ GrafanaGhost chains AI prompt injection and URL flaws to exfiltrate sensitive Grafana data Tue, 07 Apr 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/grafanaghost-silent-data/ https://www.infosecurity-magazine.com/news/storm1175-medusa-attacks/ Microsoft has released a new report about the Storm-1175 group and its connection to Medusa ransomware Tue, 07 Apr 2026 10:02:00 GMT https://www.infosecurity-magazine.com/news/storm1175-medusa-attacks/ https://www.infosecurity-magazine.com/news/storm-infostealer-remotely/ This modern infostealer adopted server-side decryption of stolen credentials to bypass security controls Thu, 02 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/storm-infostealer-remotely/ https://www.infosecurity-magazine.com/news/apple-ios-18-updates-darksword/ iOS/iPadOS 18.7.7 updates expanded to protect older devices from DarkSword web exploit kit Thu, 02 Apr 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/apple-ios-18-updates-darksword/ https://www.infosecurity-magazine.com/news/researchers-subonehour-ransomware/ Halcyon says Akira is now capable of carrying out an entire ransomware attack in less than an hour Thu, 02 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/researchers-subonehour-ransomware/ https://www.infosecurity-magazine.com/news/github-covert-multi-stage-malware/ LNK files use GitHub C2, embedded decoders and PowerShell for persistence and data exfiltration Thu, 02 Apr 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/github-covert-multi-stage-malware/ https://www.infosecurity-magazine.com/news/most-cni-firms-5m-downtime-ot/ E2e-assure says 80% of critical infrastructure providers could face millions in downtime from cyber-attacks Thu, 02 Apr 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/most-cni-firms-5m-downtime-ot/ https://www.infosecurity-magazine.com/news/google-android-dev-verification/ Android requires dev identity verification for sideloaded apps; phased global rollout from September Wed, 01 Apr 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/google-android-dev-verification/ https://www.infosecurity-magazine.com/news/eight-10-uk-manufacturers-hit/ Most UK manufacturers compromised last year suffered financial loss, says ESET Wed, 01 Apr 2026 09:30:00 GMT https://www.infosecurity-magazine.com/news/eight-10-uk-manufacturers-hit/ https://www.infosecurity-magazine.com/news/hackers-hijack-axios-npm-package/ Threat actors hijacked the popular npm package axios to spread RAT malware after compromising an open‑source maintainer’s account, researchers warn Wed, 01 Apr 2026 09:00:00 GMT https://www.infosecurity-magazine.com/news/hackers-hijack-axios-npm-package/ https://www.infosecurity-magazine.com/news/phantom-project-infostealer-nov-25/ Phantom Stealer .NET harvests browser credentials, cookies, cards, sessions, as stealer-as-a-service Tue, 31 Mar 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/phantom-project-infostealer-nov-25/ https://www.infosecurity-magazine.com/news/teampcp-exploit-stolen-supply/ TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ and Vect ransomware gangs Tue, 31 Mar 2026 12:15:00 GMT https://www.infosecurity-magazine.com/news/teampcp-exploit-stolen-supply/ https://www.infosecurity-magazine.com/news/tax-season-new-phishing-tactics/ Tax-season phishing floods deliver RMM malware, credential theft, BEC and tax-form scams Mon, 30 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/tax-season-new-phishing-tactics/ https://www.infosecurity-magazine.com/news/deepload-malware-clickfix-ai-code/ Researchers at ReliaQuest warn of persistent malware campaign targeting enterprise credentials Mon, 30 Mar 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/deepload-malware-clickfix-ai-code/ https://www.infosecurity-magazine.com/news/etherrat-bypass-security-ethereum/ EtherRAT hides C2 in Ethereum smart contracts via EtherHiding, steals wallets and credentials Thu, 26 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/etherrat-bypass-security-ethereum/ https://www.infosecurity-magazine.com/news/ai-top-cyber-priority-defenders-pwc/ PwC Annual Threat Dynamics report says AI-threats are the biggest concern of clients Thu, 26 Mar 2026 13:15:00 GMT https://www.infosecurity-magazine.com/news/ai-top-cyber-priority-defenders-pwc/ https://www.infosecurity-magazine.com/news/iranlinked-pay2key-ransomware/ Halcyon and Beazley Security track the return of Iranian ransomware group Pay2Key Thu, 26 Mar 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/iranlinked-pay2key-ransomware/ https://www.infosecurity-magazine.com/news/cloud-phones-financial-fraud/ Cloud Android phones fuel financial fraud, evading detection and enabling dropper accounts Wed, 25 Mar 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/cloud-phones-financial-fraud/ https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/ Python package LiteLLM compromised with credential-stealing malware linked to TeamPCP threat group Wed, 25 Mar 2026 12:00:00 GMT https://www.infosecurity-magazine.com/news/teampcp-litellm-pypi-supply-chain/ https://www.infosecurity-magazine.com/news/silver-fox-cyber-dual-espionage/ Silver Fox pivots from ValleyRAT tax lures to WhatsApp‑style stealers, blending espionage & phishing Tue, 24 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/silver-fox-cyber-dual-espionage/ https://www.infosecurity-magazine.com/news/npm-ghost-campaign-fake-install/ Ghost npm campaign fakes install logs to steal sudo passwords and drop RATs that loot crypto and data Tue, 24 Mar 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/npm-ghost-campaign-fake-install/ https://www.infosecurity-magazine.com/news/russian-initial-access-broker/ Russian cybercriminal Aleksei Volkov has received close to seven years behind bars for role in Yanluowang ransomware Tue, 24 Mar 2026 10:32:00 GMT https://www.infosecurity-magazine.com/news/russian-initial-access-broker/ https://www.infosecurity-magazine.com/news/tycoon2fa-phishing-service-resumes/ Tycoon2FA phishing platform resumes activity post-takedown, leveraging AITM techniques to bypass MFA Mon, 23 Mar 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/tycoon2fa-phishing-service-resumes/ https://www.infosecurity-magazine.com/news/high-tech-top-target-cyberattacks/ High tech was the most frequently targeted industry in Mandiant investigations in 2025, overtaking financial services which led in 2023 and 2024 Mon, 23 Mar 2026 15:35:00 GMT https://www.infosecurity-magazine.com/news/high-tech-top-target-cyberattacks/ https://www.infosecurity-magazine.com/news/trivy-supply-chain-attack-expands/ New Trivy Docker images 0.69.5 and 0.69.6 compromised with TeamPCP infostealer, impacting CI/CD scans Mon, 23 Mar 2026 15:05:00 GMT https://www.infosecurity-magazine.com/news/trivy-supply-chain-attack-expands/ https://www.infosecurity-magazine.com/news/ransomware-affiliate-gentlemen/ Hastalamuerte leaks The Gentlemen RaaS ops: FortiGate exploits, BYOVD evasion, Qilin split tactics Thu, 19 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/ransomware-affiliate-gentlemen/ https://www.infosecurity-magazine.com/news/financial-brands-mobile-banking/ Mobile banking malware targets over 1200 financial apps globally, shifting fraud to user devices Thu, 19 Mar 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/financial-brands-mobile-banking/ https://www.infosecurity-magazine.com/news/interlock-ransomware-exploit-cisco/ Notorious ransomware group Interlock has been exploiting a Cisco zero-day bug since January, AWS says Thu, 19 Mar 2026 09:50:00 GMT https://www.infosecurity-magazine.com/news/interlock-ransomware-exploit-cisco/ https://www.infosecurity-magazine.com/news/crypto-scam-shieldguard-dismantled/ ShieldGuard Chrome extension posed as a crypto security tool but stole wallets and drained user data Wed, 18 Mar 2026 14:15:00 GMT https://www.infosecurity-magazine.com/news/crypto-scam-shieldguard-dismantled/ https://www.infosecurity-magazine.com/news/vidar-stealer-exploits-github/ The Vidar 2.0 infostealers is deployed through fake free game cheats on GitHub and Reddit Wed, 18 Mar 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/vidar-stealer-exploits-github/ https://www.infosecurity-magazine.com/news/interpol-operation-synergia3-94/ A new law enforcement operation against phishing and ransomware operators led to the takedown of 45,000 malicious IP addresses Fri, 13 Mar 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/interpol-operation-synergia3-94/ https://www.infosecurity-magazine.com/news-features/what-cisos-should-know-and-do/ Infosecurity spoke to several experts, including OpenClaw’s own security advisor, to explore what CISOs should do to contain the viral AI agent tool’s security vulnerabilities Fri, 13 Mar 2026 14:05:00 GMT https://www.infosecurity-magazine.com/news-features/what-cisos-should-know-and-do/ https://www.infosecurity-magazine.com/news/pixrevolution-malware-brazils-pix/ PixRevolution Android trojan hijacks Brazil’s PIX payments in real time using accessibility abuse Thu, 12 Mar 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/pixrevolution-malware-brazils-pix/ https://www.infosecurity-magazine.com/news/wordpress-clickfix-infostealer/ Over 250 legitimate websites, including news outlets and a US Senate candidate’s official webpage, been compromised to infect visitors with infostealers, warn Rapid7 researchers Wed, 11 Mar 2026 14:45:00 GMT https://www.infosecurity-magazine.com/news/wordpress-clickfix-infostealer/ https://www.infosecurity-magazine.com/news/ericsson-breach-exposes-data-15k/ Ericsson data breach affects 15k employees/customers after third-party service provider compromise Tue, 10 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/ericsson-breach-exposes-data-15k/ https://www.infosecurity-magazine.com/news/contextcrush-ai-development-tools/ Critical flaw "ContextCrush" in Context7 MCP Server could allow malicious instructions into AI tools Thu, 05 Mar 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/contextcrush-ai-development-tools/ https://www.infosecurity-magazine.com/news/coruna-exploit-older-iphones/ Exploit kit "Coruna" targets iPhones running iOS 13.0 to 17.2.1, focusing on financial data theft Thu, 05 Mar 2026 12:15:00 GMT https://www.infosecurity-magazine.com/news/coruna-exploit-older-iphones/ https://www.infosecurity-magazine.com/news/iran-attacks-surveillance-cameras/ Increased attempts to compromise surveillance cameras linked to Iran during Middle East conflict Wed, 04 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/iran-attacks-surveillance-cameras/ https://www.infosecurity-magazine.com/news/badpaw-malware-targets-ukraine/ Malware campaign uses Ukrainian email service for credibility, deploying "BadPaw" to execute attacks Wed, 04 Mar 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/badpaw-malware-targets-ukraine/ https://www.infosecurity-magazine.com/news/redalert-israel-spyware-campaign/ Espionage campaign exploits Israel-Iran conflict, distributing a trojanized Red Alert app via SMS Tue, 03 Mar 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/redalert-israel-spyware-campaign/ https://www.infosecurity-magazine.com/news/ai-deepfakes-supercharge/ Cloudflare Threat Report warns that AI tools enable attackers who lacked required skills to generate effective attacks rapidly and at scale Tue, 03 Mar 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/ai-deepfakes-supercharge/ https://www.infosecurity-magazine.com/news/iranian-crypto-leaked-database/ Ariomex database reveals potential sanctions evasion and capital transfers tied to Iranian actors Tue, 03 Mar 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/iranian-crypto-leaked-database/ https://www.infosecurity-magazine.com/news/iran-cyber-attacks-global-google/ John Hultquist suggests “aggressive” Iranian cyber attackers will target the US and its Gulf allies with plausibly deniable ransomware attacks, hacktivist campaigns and more Mon, 02 Mar 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/iran-cyber-attacks-global-google/ https://www.infosecurity-magazine.com/news/middle-east-conflict-surge-global/ Military strikes in the Middle East escalate cyber ops, raising spillover risks globally for firms Mon, 02 Mar 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/middle-east-conflict-surge-global/ https://www.infosecurity-magazine.com/news/ransomware-payments-decline-1/ Chainalysis reveals a big surge in median ransomware payment size in 2025 despite overall drop in criminal revenue Mon, 02 Mar 2026 10:45:00 GMT https://www.infosecurity-magazine.com/news/ransomware-payments-decline-1/ https://www.infosecurity-magazine.com/news/project-compass-com-arrests/ International law enforcement operation led by Europol targets network of teenagers and young adults involved in ransomware attacks, extortion and other crimes Fri, 27 Feb 2026 11:00:00 GMT https://www.infosecurity-magazine.com/news/project-compass-com-arrests/ https://www.infosecurity-magazine.com/news/aeternum-botnet-c2-polygon/ New botnet Aeternum shifted C2 operations to Polygon blockchain, complicating takedown efforts Thu, 26 Feb 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/aeternum-botnet-c2-polygon/ https://www.infosecurity-magazine.com/news/32m-phishing-emails-detected-2025/ 2025 saw 32M phishing emails, with identity threats surpassing vulnerabilities Thu, 26 Feb 2026 15:00:00 GMT https://www.infosecurity-magazine.com/news/32m-phishing-emails-detected-2025/ https://www.infosecurity-magazine.com/news/google-prolific-china-hacking/ UNC2814 hit 53 victims in 42 countries with novel backdoor in decade long cyber espionage operation Thu, 26 Feb 2026 12:09:00 GMT https://www.infosecurity-magazine.com/news/google-prolific-china-hacking/ https://www.infosecurity-magazine.com/news/app-exploits-surge-ai-speeds/ IBM's 2026 X-Force report reveals 44% rise in cyber-attacks on public apps, driven by AI and flaws Wed, 25 Feb 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/app-exploits-surge-ai-speeds/ https://www.infosecurity-magazine.com/news/malicious-nuget-package-stripe-devs/ Malicious NuGet package mimicking Stripe's library targeted developers Wed, 25 Feb 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/malicious-nuget-package-stripe-devs/ https://www.infosecurity-magazine.com/news/bitpanda-mfa-phishing-scheme/ Phishing attack mimicking Bitpanda targets users, harvesting credentials and personal information Tue, 24 Feb 2026 16:05:00 GMT https://www.infosecurity-magazine.com/news/bitpanda-mfa-phishing-scheme/ https://www.infosecurity-magazine.com/news/north-korean-lazarus-group-medusa/ Ransomware Medusa linked to North Korean hackers targets US healthcare amid ongoing attacks Tue, 24 Feb 2026 14:30:00 GMT https://www.infosecurity-magazine.com/news/north-korean-lazarus-group-medusa/ https://www.infosecurity-magazine.com/news/ai-accelerates-attack-breakout/ ReliaQuest claims AI has reduced breakout and exfiltration time to under 10 minutes Tue, 24 Feb 2026 13:00:00 GMT https://www.infosecurity-magazine.com/news/ai-accelerates-attack-breakout/ https://www.infosecurity-magazine.com/news/ai-powered-cyberattacks-up/ CrowdStrike Global Threat Report warns how adversaries are leveraging AI to make campaigns more efficient and more effective Tue, 24 Feb 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news/ai-powered-cyberattacks-up/ https://www.infosecurity-magazine.com/news/shai-hulud-like-worm-devs-npm-ai/ Supply chain worm mimicking Shai-Hulud malware spread via malicious npm packages, targeting AI tools has been identified by security researchers Mon, 23 Feb 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/shai-hulud-like-worm-devs-npm-ai/ https://www.infosecurity-magazine.com/news/fraud-investigation-python-malware/ Sophisticated Python malware uncovered in fraud probe shows obfuscation, disposable infrastructure Mon, 23 Feb 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/fraud-investigation-python-malware/ https://www.infosecurity-magazine.com/news/advantest-ransomware-attack/ Advantest, a Japanese specialist in testing computer chips for major semiconductor manufacturers, has deployed incident response protocols following a cybersecurity incident Mon, 23 Feb 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/advantest-ransomware-attack/ https://www.infosecurity-magazine.com/news/university-mississippi-medical/ University of Mississippi Medical Center is still scrambling to respond to a ransomware attack last Thursday Mon, 23 Feb 2026 08:30:00 GMT https://www.infosecurity-magazine.com/news/university-mississippi-medical/ https://www.infosecurity-magazine.com/news/android-malware-hijacks-google/ A new Android malware implant using Google Gemini to perform persistence tasks was discovered on VirusTotal and analyzed by ESET Fri, 20 Feb 2026 11:35:00 GMT https://www.infosecurity-magazine.com/news/android-malware-hijacks-google/ https://www.infosecurity-magazine.com/news/remcos-rat-expands-real-time/ New Remcos RAT variant enhances real-time surveillance and evasion techniques to compromise Windows Thu, 19 Feb 2026 16:30:00 GMT https://www.infosecurity-magazine.com/news/remcos-rat-expands-real-time/ https://www.infosecurity-magazine.com/news/fake-coretax-apps-fraud-indonesia/ Fraud campaign exploiting Indonesia’s Coretax resulted in $1.5m to $2m in losses via malicious apps Thu, 19 Feb 2026 15:30:00 GMT https://www.infosecurity-magazine.com/news/fake-coretax-apps-fraud-indonesia/ https://www.infosecurity-magazine.com/news/cryptojacking-driver-boost-monero/ Cryptojacking campaign used pirated software to deploy a persistent XMRig miner with stealth tactics Wed, 18 Feb 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/cryptojacking-driver-boost-monero/ https://www.infosecurity-magazine.com/news/record-number-ransomware-victims/ Searchlight Cyber reports a 30% annual increase in ransomware victim numbers in 2025 Wed, 18 Feb 2026 11:30:00 GMT https://www.infosecurity-magazine.com/news/record-number-ransomware-victims/ https://www.infosecurity-magazine.com/news-features/why-ransomware-remains/ Ten years ago, ransom demands cost under $1000. Now ransomware attacks cost millions and are more disruptive than ever. Infosecurity explores how we got here and what needs to change Tue, 17 Feb 2026 10:00:00 GMT https://www.infosecurity-magazine.com/news-features/why-ransomware-remains/ https://www.infosecurity-magazine.com/news/infostealer-targets-openclaw/ Hudson Rock has warned OpenClaw users that infostealers are targeting their configuration files Tue, 17 Feb 2026 09:35:00 GMT https://www.infosecurity-magazine.com/news/infostealer-targets-openclaw/ https://www.infosecurity-magazine.com/news/oysterloader-new-c2-infrastructure/ OysterLoader malware evolves into 2026, refining C2 infrastructure, obfuscation & infection stages Mon, 16 Feb 2026 16:15:00 GMT https://www.infosecurity-magazine.com/news/oysterloader-new-c2-infrastructure/ https://www.infosecurity-magazine.com/news/operation-doppelbrand-trusted/ New phishing campaign dubbed Operation DoppelBrand targeted major financial firms like Wells Fargo Mon, 16 Feb 2026 15:45:00 GMT https://www.infosecurity-magazine.com/news/operation-doppelbrand-trusted/ https://www.infosecurity-magazine.com/news/world-leaks-ransomware-rustyrocket/ Accenture Cybersecurity warns over difficult to detect, “sophisticated toolset” being deployed as part of extortion campaigns Thu, 12 Feb 2026 13:30:00 GMT https://www.infosecurity-magazine.com/news/world-leaks-ransomware-rustyrocket/ https://www.infosecurity-magazine.com/news/north-korea-hackers-deepfake-crypto/ Campaign combines stolen Telegram accounts, fake Zoom calls and ClickFix attacks to deploy infostealer malware Wed, 11 Feb 2026 16:35:00 GMT https://www.infosecurity-magazine.com/news/north-korea-hackers-deepfake-crypto/ https://www.infosecurity-magazine.com/news/phorpiex-phishing-global-group/ High-volume phishing campaign delivers Phorpiex malware via malicious Windows Shortcut files Tue, 10 Feb 2026 16:00:00 GMT https://www.infosecurity-magazine.com/news/phorpiex-phishing-global-group/ https://www.infosecurity-magazine.com/news/digital-parasite-attackers-stealth/ Picus Security warns of the increasingly sophisticated ways malicious activity is staying hidden Tue, 10 Feb 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/digital-parasite-attackers-stealth/ https://www.infosecurity-magazine.com/news/zerodayrat-mobile-spyware-android/ ZeroDayRAT is a new mobile spyware targeting Android and iOS, offering attackers persistent access Tue, 10 Feb 2026 14:00:00 GMT https://www.infosecurity-magazine.com/news/zerodayrat-mobile-spyware-android/ https://www.infosecurity-magazine.com/news/ncsc-warning-severe-cyberattacks/ NCSC call firms to ‘act now’ following disruptive malware attacks targeting Polish energy providers Tue, 10 Feb 2026 11:50:00 GMT https://www.infosecurity-magazine.com/news/ncsc-warning-severe-cyberattacks/ https://www.infosecurity-magazine.com/news/voidlink-malware-multi-cloud-ai/ VoidLink, a Linux-based C2 framework, facilitates credential theft, data exfiltration across clouds Mon, 09 Feb 2026 15:25:00 GMT https://www.infosecurity-magazine.com/news/voidlink-malware-multi-cloud-ai/ https://www.infosecurity-magazine.com/news/bridgepay-confirms-ransomware/ The services of Florida-based payments platform BridgePay are offline due to a ransomware attack Mon, 09 Feb 2026 11:15:00 GMT https://www.infosecurity-magazine.com/news/bridgepay-confirms-ransomware/