Phishing & Malware Campaigns

Articles on phishing attacks, malware campaigns, social engineering threats, and deceptive messaging tactics targeting consumers and organizations.

phishing malware campaigns1 week ago5 min

npm Mirror Networks Exploited as Free Hosting for Cloudflare CAPTCHA Phishing

Threat actors exploit npm and its mirror services to host malicious HTML pages that impersonate Cloudflare Turnstile CAPTCHAs, redirecting visitors to attacker-controlled domains. The npm registry serves as free, trusted storage for phishing pages that bypass security filters by leveraging legitimate infrastructure.

phishing malware campaignsAug 7, 20265 min

DOUBLECUP ClickFix Loader: Russian Malware-as-a-Service Hides Payloads in Browser Cache Images

Analysis of DOUBLECUP, a new Russian loader-as-a-service using ClickFix attacks and steganographic PNG images to deliver CountLoader and DeviceManager malware.

phishing malware campaignsJun 28, 20265 min

How a WhatsApp VBS File Turned Into a Corporate Remote Access Tool

A coordinated malware campaign targets WhatsApp users with deceptive VBScript files that install ManageEngine Endpoint Central, granting attackers persistent remote control over Windows systems.