Supply chainGlassWorm supply chain attack campaign expands furtherSC StaffMarch 16, 2026Dozens of malicious Open VSX extensions and over 150 GitHub compromised repositories have been used as part of the intensified GlassWorm supply chain attack campaign, reports The Hacker News.
MalwareMicrosoft reports Storm-2561 campaign using fake VPN clients for credential theftSC StaffMarch 16, 2026The attack begins with threat actors manipulating search engine results to redirect users seeking enterprise VPN software to fake websites.
MalwareNew ClickFix attack leverages WorkFlowy for stealthy malware deliverySC StaffMarch 16, 2026The attack begins with a phishing website mimicking a CAPTCHA, prompting users to press Win + R and paste a command.
AI/MLClickFix campaigns target macOS users via MacSync infostealerSteve ZurierMarch 16, 2026ClickFix campaigns use fake ChatGPT tools and Terminal tricks to infect macOS with MacSync infostealer.
Data SecurityFBI investigates malware in Steam games, seeks victim informationSC StaffMarch 16, 2026The FBI's investigation centers on games including BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova.
MalwareAI-generated malware Slopoly used in Interlock ransomware attacksSC StaffMarch 13, 2026Once inside a system, threat actors deploy Slopoly as a PowerShell script, functioning as a client for a command-and-control (C2) framework.
MalwarePixRevolution Android trojan hijacks Brazil’s instant paymentsSC StaffMarch 13, 2026The PixRevolution malware operates by displaying a fake "Aguarde..." (please wait) loading screen when a user initiates a PIX transfer.
