Malware Alerts

Attackers are using fake ChatGPT Custom GPTs to trick users into installing a remote access trojan (RAT), according to security firm Huntress. The campaign reportedly used sponsored Google results for “chatgpt” to promote malicious Custom GPTs named “Plus 5.6.” Users who interacted with the fake GPT were directed to a fraudulent backup website and then shown a fake Cloudflare-style CAPTCHA.

A North Korea-linked threat actor known as Jade Sleet has been linked to a cyberattack on an Indian IT services company, highlighting how attackers can target developers to gain access to wider business infrastructure.

Iranian hackers use Telegram-controlled Windows malware to steal data, capture screenshots and record audio. Learn how to stay protected from cyber espionage.

Hackers are abusing Android car infotainment software updates to install malware, conduct ad fraud, collect device data and create proxy networks.

China-linked SilkParasite targets Central Asian governments using spear-phishing, DLL sideloading, Google Drive C2, and five newly identified malware families.

TwinLoot is a Python-based malware framework that abuses Microsoft 365, Azure, SharePoint, Graph API and Teams to hide command-and-control traffic.

New Boss Scam attacks hijack WhatsApp Web sessions using malicious files. Learn how organizations can protect finance teams and endpoints.

Hackers are hijacking hotel Wi-Fi networks to deliver fake browser updates that install CornFlake malware, stealing passwords, browser sessions, and Microsoft 365 tokens.

MacSync malware targets macOS users through fake Claude installation guides, stealing passwords, browser sessions, cloud credentials, and cryptocurrency wallet data.

AI-generated phishing attacks can steal browser sessions and bypass MFA without malware. Learn how AiTM attacks target session tokens and how businesses can improve security.