The Hacker News

Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware

North Korea-linked ScarCruft uses fake Microsoft Account alerts and ZIP files to deliver NarwhalRAT, a Python RAT built for ...
Bleeping Computer

Clever ‘File Archiver In The Browser’ phishing trick uses ZIP domains

A new 'File Archivers in the Browser' phishing kit abuses ZIP domains by displaying fake WinRAR or Windows File Explorer windows in the browser to convince users to launch malicious files. Earlier ...
Miami University

Fake Resumes Via Word Files Disguising LockBit Ransomware

Our information security office has received word from AhnLab Security Center (ASEC) that LockBit ransomware has been circulating Word files disguised as resumes. This ransomware was one of the most ...
Yahoo

Don’t click on that: FBI warns about fake file converter websites

Add Yahoo as a preferred source to see more of our stories on Google. Here are your converted MP3s (and some ransomware): US officials are warning users to avoid file conversion websites. Franziska ...
Ars Technica

Here’s how carefully concealed backdoor in fake AWS files escaped mainstream notice

Researchers have determined that two fake AWS packages downloaded hundreds of times from the open source NPM JavaScript repository contained carefully concealed code that backdoored developers’ ...
Infosecurity Magazine

Cybercriminals Use Fake AI Guides and Dev Tools to Spread AsyncRAT Malware

The two files posing as Realtek components are really copies of AutoHotkey, a legitimate automation tool repurposed as an ...
Dark Reading

Attacks on Azerbaijan Businesses Drop Malware via Fake Image Files

A spear-phishing email posing as a memo from the president of an Azerbaijan company hid malware behind images to infiltrate businesses associated with the firm. According to research from Fortinet, ...