Malware

The “AI videos” generated from these sites are actually malicious executables that set off the attack chain.

Researchers have uncovered significant updates to OtterCookie, a cross-platform malware tied to the North Korean-aligned Contagious Interview campaign, according to The Hacker News.

BleepingComputer reports that between April 12 and April 16, 2025, the website of iClicker, a widely used student engagement platform, was compromised in a social engineering scheme known as a ClickFix attack.

A recent malspam campaign revealed a payload nested within two .NET assemblies.

The ColdRiver group has been spotted using a previously unknown piece of malware designated as “LostKeys.”

The U.S. Department of Government Efficiency was reported by journalist Micah Lee to have had one of its software engineers compromised with information-stealing malware.

BleepingComputer reports that malicious code injected into the deprecated yet widely downloaded npm package 'rand-user-agent' as part of a supply chain attack has facilitated the deployment of a remote access trojan on systems where it has been installed.