March 2025

The threat actor known as EncryptHub exploited a recently-patched security vulnerability in Microsoft Windows as a zero-day to deliver a […]

The Russian-speaking hacking group called RedCurl has been linked to a ransomware campaign for the first time, marking a departure

Kryptina RaaS is a Linux-focused RaaS platform & service that started life as an unsellable giveaway. However, large-scale ransomware operations

Cybersecurity researchers have discovered two malicious packages on the npm registry that are designed to infect another locally installed package,

“A boxer derives the greatest advantage from his sparring partner…” — Epictetus, 50–135 AD Hands up. Chin tucked. Knees bent.

A new phishing campaign that uses the fake CAPTCHA websites we reported about recently is targeting hotel staff in a likely

The threat intel research used in this post was provided by Malwarebytes Senior Director of Research, Jérôme Segura. DeepSeek’s rising

When people think of cybersecurity threats, they often picture external hackers breaking into networks. However, some of the most damaging

Threat actors are leveraging an e-crime tool called Atlantis AIO Multi-Checker to automate credential stuffing attacks, according to findings from