Malware

Investigation led by South Korean authorities revealed that leading mobile carrier KT Corp. had hidden multiple malware infections and breaches that resulted in a recent cyberattack involving illegal micro base stations, according to the Yonhap News Agency.

Threat actors leverage details from real reservations to steal customers’ banking information.

The attack, uncovered in July 2025, featured a phishing campaign using password-protected archives to distribute a new backdoor called BackDoor.ShellNET.1.

Threat actors' use of ClickFix social-engineering attacks surge in 2025.

Trustwave warns the new group aims to spread fear and extort companies for big payouts.

The report highlights how state-sponsored and criminal groups are leveraging AI tools like Gemini to automate and scale up attacks.

A recent attack achieved Domain Controller compromise in just 17 hours.

Windows machines' Hyper-V hypervisors are being targeted by Russia-linked threat operation Curly COMrades to establish a concealed Alpine Linux-based virtual machine enabling long-term network compromise and malware delivery as part of an attack campaign that commenced in July, The Register reports.