Russian APT COLDRIVER launches ClickFix attacks with BAITSWITCH and SIMPLEFIX malware; BO Team and Bearlyfy target Russia.
Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web browser. The package, masquerading as a utility library, leverages this ...
DPRK used ClickFix to deliver compiled BeaverTail to crypto marketers; Windows build used password-protected archives, ...