Sandworm

PHANTOMPULSE: anatomy of a hijackable blockchain-C2 RAT

MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration

AI-Assisted Cyberespionage Campaign Targets Government Systems

Infostealer riding the AI Train

Shai-Hulud strikes again: CHAINDROP worm hits 400+ npm packages

Autonomous LLMjacking: ‘Skynet’ Agent Hijacks Exposed AI Models to Run Attacks

PHP2Shell: Two Critical PHP Flaws Allow Unauthenticated Remote Code Execution

Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries

Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain

ConnectWise (SkyKick) Vendor Credentials Abused in M365 Attacks

Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

Huntress + AlgaPSA Integration: Built in Days by Nine Minds

Aoki: Infostealer Targets AI Coding Assistant Credentials

Passkeys Raise the Bar. Here’s Where Attackers Can Still Get In.

ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure

Fake WatchGuard VPN Site Steals Credentials

Inside ICMacOS: From an Infostealer to a Persistent RAT

China Linked Warlock Ransomware Campaign Targets Critical Infrastructure

SMB1001: How Huntress Maps to Each Tier

AveMariaRAT | WarZoneRAT

Anatomy of a macOS ClickFix Crimekit that Weaponises EtherHiding

Unleashing the Viper : A Technical Analysis of WhiteSnake Stealer

Meduza Stealer or The Return of The Infamous Aurora Stealer

Pure Logs Stealer Fails to Impress

MetaStealer - Redline's Doppelgänger

From Russia With Code: Disarming Atomic Stealer

The GlorySprout or a Failed Clone of Taurus Stealer

MacOS ClickFix AMOS Campaign

Perl based macOS/linux Stealer

Inside Valkyrie Stealer: Capabilities, Evasion Techniques, and Operator Profile