BlackSanta is a malware module that kills EDR and AV at the kernel level prior to unleashing the malware’s final purpose.

New ClickFix variant maps WebDAV drive to run trojanized WorkFlowy app, enabling stealth C2 beacon and payload delivery.

CVE-2025-32975 exploited since March 2026 on unpatched KACE SMA systems, enabling admin takeover and payload delivery.

Hundreds of GitHub repositories seemingly offering “free game cheats” deliver malware, including the Vidar infostealer, ...

While software can sync files and folders for you, it's often limited in scope. Learn how a PowerShell script can help you build a custom solution.

High tech was the most frequently targeted industry in Mandiant investigations in 2025, overtaking financial services which ...

Instead of the usual phishing email or fake download page, attackers are using Google Forms to kick off the infection chain.

This simple script tamed my Downloads folder.

The LeakNet ransomware gang is now using the ClickFix technique for initial access into corporate environments and deploys a ...

A new ClickFix attack variant uses fake CAPTCHA pages instructing victims to paste and execute malicious commands in Windows ...

For more than a year, a Russian-speaking threat actor targeted human resource (HR) departments with malware that delivers a new EDR killer named BlackSanta.