A new WhatsApp worm is infecting users by sending fake ZIP attachments that contain hidden malware designed to steal banking credentials. Once opened, it spreads automatically through the victim’s contacts, targeting Windows systems via WhatsApp Web. The campaign has hit users in Brazil the hardest, but experts warn it could spread globally. A New Wave […]
AI-driven cybercrime is lowering barriers for attackers worldwide. FraudGPT and WormGPT are sold on darknet forums for as little as $100, enabling phishing and ransomware campaigns. Prompt injection exploits and tools like PromptLock highlight how easily generative AI can be misused. The threat is no longer theoretical — it’s a national security concern. The Rise […]
A major npm supply chain attack has compromised more than 40 Node Package Manager (npm) packages, injecting a malicious script called bundle.js to steal sensitive developer credentials. According to security researchers, the campaign, dubbed the Shai-Hulud attack, uses the open-source tool TruffleHog (TruffleHog Secret Scanner) to extract secrets such as GitHub personal access tokens, Node […]