Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python repositories.
Plus: A porn-quitting app exposed the masturbation habits of hundreds of thousands of users, Russian hackers are trying to take over people’s Signal accounts, and more.
The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation ...
Storm-2561 spreads fake VPN installers via SEO poisoning and GitHub downloads, stealing enterprise VPN credentials with Hyrax malware.
An international law enforcement operation shut down a service called SocksEscort, which allegedly helped cybercriminals all over the world launch ransomware and DDoS attacks, as well as distribute ...
A newly discovered botnet malware called KadNap is targeting ASUS routers and other edge networking devices to turn them into ...
Researchers say they have uncovered a takedown-resistant botnet of 14,000 routers and other network devices—primarily made by ...
SocksEscort sold proxy services on the open web, but was actually routing traffic through compromised routers and internet-connected devices.