Malware

Data from over 400,000 users stolen in a ransomware attack on SonicWall firewall.

More sophisticated Water Saci attack methods uncovered Threat operation Water Saci has exploited WhatsApp to spread HTML Application files and PDFs that facilitate banking trojan compromise in attacks against Brazilian users, according to The Hacker News.

Researchers have detailed a sophisticated campaign employing advanced techniques like raw-socket scanning, masqueraded processes and dynamic DNS resolution to evade detection.

As reported by HackRead, a significant 517% increase in the deceptive ClickFix attack has raised alarms in the cybersecurity community.

Windows, macOS, and Linux systems could be compromised with tailored payloads by the illicit Rust package "evm-units," which impersonates an Ethereum Virtual Machine unit helper tool and has been downloaded more than 7,400 times since April, The Hacker News reports.

New Arkanix infostealer discovered Newly emergent Arkanix information-stealing malware has been under accelerated development to facilitate extensive data theft for financially motivated threat actors, according to GBHackers News.

The campaign, active between September 30, 2024, and March 18, 2025, targeted sectors including engineering, local government, manufacturing, technology, transportation, utilities and universities.