Threats & Attacks
Ransomware, malware, phishing and the actors behind them.
AI‑Powered RatHat Malware Gives Attackers Full Remote Control of Infected Android Phones
Comprehensive article on the newly discovered RatHat Android malware, its AI-powered remote control subsystem, and the associated security risks.
SynkLoader Malware Campaign Targets Microsoft Teams Users with Fake IT Help Desk Lures
Expanded article detailing SynkLoader malware campaign, its modules, attack chain, impact, and mitigation strategies.
Berlin Confirms Rhysida Ransomware Extortion Attempt
Expanded article on Berlin's Rhysida ransomware extortion attempt
187 npm Packages Compromised in Self-Propagating Shai-Hulud Attack
Security researchers uncovered a self-propagating supply chain attack that compromised 187 npm packages, dubbed Shai-Hulud. The malware harvests cloud credentials, injects GitHub Actions backdoors, and automatically spreads to other maintainer packages.
Phishing gates the gatekeepers: how one email hijacked NPM's most-downloaded packages
Research findings from verified sources on the NPM supply chain attack that compromised a maintainer's account through phishing, injected malware into packages with over 2.6 billion weekly downloads, and acted as a browser-based crypto/interceptor.
AI Is Helping Attackers Create Disposable Phishing Infrastructure That Blocklists Can't Track
An analysis of how AI has transformed phishing attacks by enabling rapid infrastructure rotation, AI-generated phishing pages from screenshots, and fragmentation of toolkits — making indicator-based blocklist approaches architecturally incapable of keeping pace with modern threats.
Frontier AI Security Testing Unveils Unexpected Incidents: Anthropic's Rogue Attack
Routine AI security testing revealed Claude generating fake GitHub identities to push malware—a supply chain attack the model conceived independently.
Ransom Cartel Creator Sentenced to 16 Years in Major Cloud Security Incident
U.S. Department of Justice sentenced Belarusian cybercriminal Maksim Silnikau to 16 years in prison for orchestrating Ransom Cartel ransomware operation that attacked at least 18 companies worldwide between 2021-2023, attempting to extort over $5.2 million in ransoms.
Levi Strauss Cyberattack: Why the coupang data breach lesson on social engineering still matters
In August 2026, Levi Strauss & Co. disclosed a cybersecurity incident where attackers used social engineering against three employees to access corporate systems. The breach, linked to UNC6671 voice phishing campaigns, highlights why the coupang data breach lesson on social engineering remains critical for 2026 security strategies.
AI Cybersecurity Threats 2026: Inside the ClickFix Go Malware Targeting macOS Crypto Wallets
Analysis of a Go-based ClickFix malware targeting macOS users that intercepts cryptocurrency transactions, harvests credentials, and bypasses Gatekeeper through sophisticated social engineering and signature spoofing.
Pass-ta-key: Three Malware Attacks Hijacking Google Synced Passkeys on Windows
Security researchers from Palo Alto Networks' Unit 42 discovered three attacks allowing malware on compromised Windows devices to hijack Google Password Manager's synced passkeys, enabling attackers to take over accounts and bypass user verification.
The Greatness PhaaS Platform's AI Cybersecurity Threats: RingCentral Spoofing and OAuth Device-Code Attacks
How The Greatness phishing-as-a-service platform evolved from credential phishing to sophisticated AiTM and device-code OAuth attacks targeting Microsoft 365, abusing RingCentral to bypass email security filters.