Retro gaming fans should be careful with GitHub projects that claim to be tools or plugins for their consoles. We looked at one example aimed at PlayStation Vita owners ...

We found dozens of fake World Cup streaming sites using football as bait to funnel visitors through a malicious advertising network ...

We found EtherRAT malware being distributed by a website with a strange homepage. Following the trail, we discovered a vast network of malicious infrastructures, distributing malware, malicious documents, remote desktop software, and phishing pages.  ...

A convincing fake FACEIT verification page is stealing Steam accounts by using a fake login window that looks completely legitimate ...

For years, Active Directory breaches were associated with exploit chains, malware, lateral movement, and ransomware deployment. The assumption was simple: attackers had to break through security controls before they could gain access ...

Cybercriminals are hiding malware in cracked and repacked games, infecting more than 400,000 devices worldwide ...

Ive been thinking about threat intelligence lately. Specifically: indicators of compromise (IOC), how and where to share them to cause maximum pain to adversaries and help as many organizations as possible protect ...

Invoices pretending to be from Amazon, PayPal, and others reveal how criminals use fear and phone calls to steal money and devices ...

Cybercriminals prefer infostealers to traditional phishing techniques because they reduce friction, scale well, and are widely available ...

Scammers use fake takedown requests, countdown timers, and spoofed sign-in screens to steal Google logins from Chrome developers ...