A threat campaign is relying on cross-site scripting attacks to deliver malware to and steal credentials from online shops.
The macOS vulnerability allowed attackers to bypass Apple’s core security defenses with specially-crafted application bundles.
An uninstall process, pushed out to infected devices as part of the takedown of Emotet by law enforcement, has been triggered to kill the malware.
Yet another cryptocurrency mining malware family is attempting to compromise the Microsoft Exchange ProxyLogon flaws.
Researchers have uncovered a new RAT that contains data exfiltration capabilities and relies on Telegram for command-and-control (C2) communications.