Of 1,258 public sandbox analyses that ANY.RUN tied to fake AI tool campaigns between April 15 and Oct. 5, 2026, 81% imitated ...

A new dynamic malware detection method fuses sandbox-captured API call sequences with color images converted from out-of-VM ...

Researchers say that mercenary hackers laced ads with zero-click exploits that installed sophisticated malware on the devices ...

Custom variants of OpenAI's ChatGPT promoted in sponsored Google results are directing unsuspecting users to malicious sites that use ClickFix attacks to deliver malware.

MacSync malware hides malicious commands inside iCloud calendar events to download additional payloads onto infected Macs without raising suspicion.

ROMULUS uses ClickFix lures and PowerShell scripts to deliver malware, including Legion Loader, across infrastructure ...

Cleafy traced nearly 100 RatHat console deployments since April 2026, with the platform building malware and using Gemini to rank victims.

Attackers uploaded yay and paru lookalikes to the Arch Linux AUR, using typosquatting to run malware with root privileges on ...

The world’s most prolific and dangerous malware botnet has been taken down following a global law enforcement operation that was two years in planning. Europol, the FBI, the UK’s National Crime Agency ...

Attackers are using ChatGPT, Google Sites, and a fake Cloudflare check to make a malware campaign look far more convincing.

A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers to assemble malware directly in memory. The operation has been ...

x47.c Windows malware uses xAI's Grok to maintain persistence on infected PCs while stealing passwords, browser cookies and API keys from victims.