Mur d'images - Cyberveille

curated by Decio

GreyNoise Discovers Stealthy Backdoor Campaign Affecting Thousands of ASUS Routers

SuperCard X: exposing a Chinese-speaker MaaS for NFC Relay fraud operation

Threat actors misuse Node.js to deliver malware and other malicious payloads | Microsoft Security Blog

Phishing campaign impersonates Booking .com, delivers a suite of credential-stealing malware

Storm-2372 conducts device code phishing campaign

CVE-2025-0411: Ukrainian Organizations Targeted in Zero-Day Campaign and Homoglyph Attacks

X Phishing | Campaign Targeting High Profile Accounts Returns, Promoting Crypto Scams

New TorNet backdoor seen in widespread campaign

fasthttp Used in New Bruteforce Campaign

New Star Blizzard spear-phishing campaign targets WhatsApp accounts | Microsoft Security Blog

Effective Phishing Campaign Targeting European Companies and Organizations

Matrix Unleashes A New Widespread DDoS Campaign

Threat Campaign Spreads Winos4.0 Through Game Application

HijackLoader evolution: abusing genuine signing certificates

Fake recruiter coding tests target devs with malicious Python packages

Behind the CAPTCHA: A Clever Gateway of Malware

New Android SpyAgent Campaign Steals Crypto Credentials via Image Recognition

The Malware That Must Not Be Named: Suspected Espionage Campaign Delivers “Voldemort”

The gift that keeps on giving: A new opportunistic Log4j campaign

Extension Trojan Malware Campaign

Ongoing Social Engineering Campaign Refreshes Payloads

Social Media Malvertising Campaign Promotes Fake AI Editor Website for Credential Theft

SeleniumGreed Cryptomining Campaign Exploiting Grid Services | Wiz Blog

Exploiting CVE-2024-21412: A Stealer Campaign Unleashed

Phishing with Cloudflare Workers: Transparent Phishing and HTML Smuggling

Ongoing Malvertising Campaign leads to Ransomware

The Darkside of TheMoon

Large-Scale StrelaStealer Campaign in Early 2024

PIKABOT, I choose you!

Community Alert: Ongoing Malicious Campaign Impacting Azure Cloud Environments

Follow-On Extortion Campaign Targeting Victims of Akira and Royal Ransomware

LinkedIn Smart Links Fuel Credential Phishing Campaign

X-Force uncovers global NetScaler Gateway credential harvesting campaign

PSA: Ongoing Webex malvertising campaign drops BatLoader

LinkedIn under attack, malicious hackers seize accounts

Apple Crimeware | Massive Rust Infostealer Campaign Aiming for macOS Sonoma Ahead of Public Release

New Magecart-Style Campaign Abusing Legitimate Websites to Attack Others | Akamai

Wordfence Firewall Blocks Bizarre Large-Scale XSS Campaign

Espionage campaign linked to Russian intelligence services

Who Broke NPM?: Malicious Packages Flood Leading to Denial of Service

West ill-prepared to deal with evolving cyber threats, report concludes

Uncle Sow: Dark Caracal in Latin America

Enigma Stealer Targets Cryptocurrency Industry with Fake Jobs

The Titan Stealer: Notorious Telegram Malware Campaign

Massive ois[.]is Black Hat Redirect Malware Campaign

Dormant Colors browser hijackers could be used for more nefarious tasks, report says

Pro-PRC DRAGONBRIDGE Influence Campaign Leverages New TTPs to Aggressively Target U.S. Interests, Including Midterm Elections

“Dormant Colors”: Live Campaign With Over 1M Data Stealing Extensions Installed

Amazon‑themed campaigns of Lazarus in the Netherlands and Belgium

Warning: New attack campaign utilized a new 0-day RCE vulnerability on Microsoft Exchange Server

In the footsteps of the Fancy Bear: PowerPoint mouse-over event abused to deliver Graphite implants

Malvertising on Microsoft Edge's News Feed pushes tech support scams

Roasting 0ktapus: The phishing campaign going after Okta identity credentials

Ongoing phishing campaign can hack you even when you’re protected with MFA