Fake CAPTCHA (ClickFix) pages are enabling threat actors to turn a single user click into an enterprise‑wide compromise, as seen in a recent incident affecting a major Polish organization. The campaign chained social engineering, DLL side‑loading, and dual malware families (Latrodectus and Supper) to gain persistence, perform reconnaissance, and prepare the environment for potential follow‑on […]

The post Fake CAPTCHA Attack Chain Triggers Enterprise-Wide Malware Infection in Organizations appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

An aggressive malware campaign targeting IT professionals in cryptocurrency, Web3, and AI to steal sensitive data and live crypto funds from victim wallets. The attackers pose as recruiters and use trojanized coding tasks to deliver two core malware families, BeaverTail and InvisibleFerret, which have been steadily upgraded with new data theft and wallet-targeting features. The […]

The post Malware Campaign Targets Crypto Users with Fake MetaMask Wallet and Remote Access Backdoor appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new Linux malware sample that strongly aligns with the SysUpdate malware family used by APT27/Iron Tiger. Initially detected on a client’s system, the binary behaved like a system service and executed the GNU/Linux id command when run without specific arguments, returning the output as part of its basic functionality. Closer inspection showed that the sample was […]

The post New SysUpdate Variant Malware Discovered, Decryption Tool for Linux C2 Traffic Released appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.