Signed fake Teams and Zoom apps used to plant remote access backdoors
A new phishing campaign is pushing signed malware disguised as Microsoft Teams, Zoom, Adobe Reader, and other familiar workplace apps. Microsoft says the attackers used…
Chinese-linked hackers targeted Qatar with PlugX lures within a day of the Middle East escalation
A China-linked cyber-espionage campaign targeted organizations in Qatar almost immediately after the latest Middle East conflict escalated. Public reporting says the operation used war-themed lure…
GhostClaw poses as OpenClaw in npm attack that can empty developer machines
A malicious npm package has surfaced under the name @openclaw-ai/openclawai, and researchers say it impersonates an OpenClaw installer while stealing passwords, browser data, SSH keys,…
ScamAgent shows how AI agents can automate scam calls from start to finish
Researchers have built a system called ScamAgent that can carry out realistic, multi-turn scam conversations with very little human input. The project, described in an…
Hackers exploit Microsoft Teams chats to trick employees into giving remote access
Yes, attackers are using Microsoft Teams messages and Windows Quick Assist to fool employees into handing over control of their PCs. BlueVoyant says the latest…
Hackers Use Fake CleanMyMac Site to Deploy SHub Stealer and Hijack Crypto Wallets
Cybersecurity researchers have uncovered a phishing campaign using a fake website that imitates the popular macOS utility CleanMyMac. The malicious site distributes a macOS information-stealing…
BoryptGrab Stealer Spreads via Fake GitHub Repositories, Stealing Browser and Crypto Wallet Data
A data-stealing malware called BoryptGrab is spreading through fake GitHub repositories that impersonate legitimate software downloads. Security researchers warn that the campaign targets Windows users…
Iran-Linked Hackers Target U.S. Critical Infrastructure Amid Rising Cyber Threat Activity
Iran-linked cyber threat actors have intensified operations against U.S. organizations, raising concerns across the cybersecurity community. Security researchers say the advanced persistent threat group known…
VIP Keylogger Malware Campaign Uses Steganography and Fileless Execution to Steal Credentials
A large phishing campaign distributing VIP Keylogger malware is targeting organizations and individuals worldwide. Security researchers warn that the threat uses fileless techniques, steganography, and…
Signal confirms targeted phishing attacks leading to account takeovers
Signal has confirmed that a wave of targeted phishing campaigns has led to account takeovers affecting some high-profile users, including journalists and government officials. The…
November 21, 2025
1 comment 
