North Korea-linked hackers abuse Google, Naver ads to spread malware
Attackers weaponized advertising URLs in spear-phishing emails, making malicious links appear legitimate.
Attackers weaponized advertising URLs in spear-phishing emails, making malicious links appear legitimate.
The attack begins when users search for appliance manuals or related software via search engines.
The campaign involves a fake browser extension called ‘NexShield,’ which impersonates the legitimate uBlock Origin Lite ad blocker.
Feras Khalil Ahmad Albashiti now faces up to 10 years in prison and a fine of up to $250,000.
Resecurity noted that its HUNTER team observed PDFSIDER being actively used by several ransomware groups to deliver payloads.
Cisco has finally fixed a critical Cisco AsyncOS zero-day flaw exploited since November 2025.
In brief: Microsoft fixes a Windows zero-day flaw, Russian hackers target Ukraine posing as charities, and more.
RedVDS sold access to disposable virtual Windows servers for as little as $24 a month, allowing criminals to run fraud and phishing operations at scale.
The man is suspected of facilitating cybercrime by allowing malware devs to test whether their software could bypass antivirus protections.
The campaign mainly delivers commodity malware, including info-stealers such as AgentTesla, FormBook, and Lumma Stealer.
Showing elements 301 - 310