A newly discovered FileFix social engineering attack impersonates Meta account suspension warnings to trick users into ...
A threat actor targeted low-skilled hackers, known as ‘script kiddies’ with a fake malware builder that secretly infected them with a backdoor to st ...
FileFix phishing attack in June 2025 delivers StealC malware via Bitbucket images, bypassing detection with obfuscation.
Zscaler reveals SilentSync remote access trojan hidden in two malicious PyPI Python packages, risking browser data theft and multi-OS compromise.
A new social engineering "hack yourself" attack that tricks victims into executing malware through seemingly innocent file ...
IntroductionZscaler ThreatLabz regularly monitors for threats in the popular Python Package Index (PyPI), which contains open source libraries that are frequently used by many Python developers. In ...
Russian malware CountLoader shows advanced persistence and fuels ransomware attacks. Find out what security teams must watch for.
A threat actor named WhiteCobra has targeting VSCode, Cursor, and Windsurf users by planting 24 malicious extensions in the ...
ClickFix typically asks the victim to perform a fake CAPTCHA test. FileFix tricks the user into copying and pasting a command ...
SEO poisoning attack has been observed targeting Chinese Windows users via lookalike domains, installing Hiddengh0st and ...
A rare in-the-wild FileFix campaign has been observed by cybersecurity researchers, which hides a second-stage PowerShell ...