Npav Lab
-
131 rebranded Chrome extensions spam Brazilian users via WhatsApp—learn about the violations, white-label model, and tips to avoid risky add-ons and protect your messaging.
-
Canva's major outage, linked to AWS failure, affects login and editing—learn about the disruption, user complaints, and alternatives to stay productive during downtime.
-
European authorities arrest 7 in SIMCARTEL operation, seizing SIMs used for fraud—learn about the scams, losses, and tips to avoid becoming a victim of cybercrime networks.
-
8Base ransomware claims to have stolen Volkswagen data—learn about the allegations, company's response, and tips for supply chain security to avoid similar breaches.
-
DefenderWrite exploits whitelisted Windows programs to drop malware in AV folders—learn about its method, testing, and defenses like auditing whitelisting to protect against persistence threats.
-
CVE-2025-11001 and CVE-2025-11002 in 7-Zip allow code execution via malicious ZIPs—update to v25.00, disable symlinks, and use antivirus to avoid path traversal attacks.
-
Maharashtra cyber scam defrauds 72-year-old of ₹58 crore via fake TRAI calls—learn about psychological manipulation, arrests, and tips to verify authorities and report frauds quickly.
-
Posted: October 18, 2025Views: 13WaterPlum's Cluster B deploys OtterCandy via ClickFake campaigns—learn about its theft features, v2 updates, and defenses like monitoring Node.js to protect against credential and crypto theft.
-
TikTok videos lure users with fake Photoshop activators, delivering AuroStealer via PowerShell—learn to avoid risky commands, use antivirus, and enable MFA to protect against credential theft.
-
Microsoft's report shows AI boosting phishing success to 54% click-through—learn about ClickFix trends, nation-state AI use, and defenses like MFA to protect against evolving cyber attacks.