Malware Alerts

North Korean Hackers Use Fake Interviews to Spread OtterCandy Malware

Posted: October 18, 2025

Categories: Malware Alerts, Hacker, Financial fraud, Fraud Protector, Mobile Frauds

Tags: fp-3b, fp-3a, fp-2e, fp-2d, fp-2c, fp-2b, fp-2a, fp-1b, fp-1a

Author: Npav Lab

WaterPlum's Cluster B deploys OtterCandy via ClickFake campaigns—learn about its theft features, v2 updates, and defenses like monitoring Node.js to protect against credential and crypto theft.

TikTok Videos Spread Malware: How Fake Photoshop Activators Infect Users

Posted: October 18, 2025

Categories: Malware Alerts

Tags: fp-3d, fp-3b, fp-3a, fp-2e, fp-2c, fp-2b, fp-2a, fp-1b, fp-1a

Author: Npav Lab

TikTok videos lure users with fake Photoshop activators, delivering AuroStealer via PowerShell—learn to avoid risky commands, use antivirus, and enable MFA to protect against credential theft.

How North Korean Hackers Hide Malware in Blockchain Job Scams

Posted: October 17, 2025

Categories: Malware Alerts, Hacker

Tags: fp-3b, fp-3a, fp-1a

Author: Npav Lab

UNC5342 uses EtherHiding to embed malware in smart contracts for credential theft—learn to spot fake jobs, restrict downloads, and bolster defenses against these evolving cyber attacks.

Beware Fake LastPass Emails: How Malware Sneaks in to Steal Your Info

Posted: October 17, 2025

Categories: Malware Alerts, Data Breach, Email And Password

Tags: fp-3b, fp-3a, fp-2e, fp-2d, fp-2c, fp-2b, fp-2a, fp-1b

Author: Npav Lab

LastPass warns of phishing emails with ZIP files dropping malware for keylogging and data theft—enable MFA, use antivirus, and verify sources to protect against these sneaky attacks.

How Hackers Use Blockchain to Infect WordPress Sites with Malware

Posted: October 17, 2025

Categories: Malware Alerts, Hacker

Tags: fp1b, fp-6d, fp-3b, fp-3a, fp-2e, fp-2c

Author: Npav Lab

UNC5142 exploits WordPress via BNB Smart Chain to spread stealers like Atomic—learn to update sites, use antivirus, and detect anomalies to protect against these evolving cyber attacks.

Hackers Hijack Fake Homebrew Sites to Deliver Malware on macOS Devices

Posted: October 14, 2025

Categories: Malware Alerts, Browser Hijack, Hacker, Website hacks

Comments: 1

Tags: fp-4c, fp-3b, fp-3a, fp-1b, fp-1a, fp-

Author: Npav Lab

Kandji uncovers a September 2025 campaign where attackers clone Homebrew sites to inject malware like Odyssey Stealer via clipboard tricks—exploit C2 servers and bypass trust; mitigate by verifying sources and using endpoint monitoring.

Watch Out for Fake Traffic Fines: How RAT Malware in mParivahan Clones Steals Your Data

Posted: October 13, 2025

Categories: Malware Alerts, Data Breach, RAT

Tags: fp1a, fp-3b, fp-3a, fp-2e, fp-2d, fp-2c, fp-2b, fp-2a

Author: Npav Lab

Indian scammers use WhatsApp fake ticket alerts to push RAT-infected mParivahan apps, stealing OTPs, spying via camera, and draining banks. Download from official stores, update OS, use antivirus—report to 1930 if hit to stay safe.

Job Hunters Alert: Vampire Bot Malware Hides in Fake Job Offer Emails

Posted: October 09, 2025

Categories: Malware Alerts, Email And Password

Tags: fp-3b, fp-3a, fp-2e, fp-2d, fp-2c, fp-2b, fp-2a, fp-1b, fp-1a

Author: Npav Lab

Vampire Bot spyware targets job seekers via deceptive ZIP attachments in recruiter emails, stealing screenshots and data. Linked to BatShadow hackers, it evades detection—stay safe by verifying offers and using EDR tools to avoid digital traps.

OpenAI Bans ChatGPT Accounts of Chinese Hackers Using AI for Malware Refinement and Phishing Attacks

Posted: October 08, 2025

Categories: Malware Alerts, Phishing, Hacker, AI

Tags: fp-3b, fp-3a, fp-1a

Author: Npav Lab

OpenAI's October 2025 report reveals bans on ChatGPT accounts linked to PRC-affiliated groups like UNKDROPPITCH, who leveraged AI to debug malware (GOVERSHELL, HealthKick), craft targeted phishing, and build surveillance tools—disrupting 40+ networks; models block direct threats but highlight efficiency risks in cyber ops.

Hackers Silently Weaponize WordPress Sites with Malicious PHP Injections for Malvertising and Redirects

Posted: October 08, 2025

Categories: Malware Alerts, Data Breach, Hacker

Tags: fp-3b, fp-3a, fp-1b, fp-1a

Author: Npav Lab

Sucuri uncovers stealthy PHP code injections in WordPress theme files (functions.php) exploiting weak permissions and outdated plugins to fetch obfuscated JS from brazilc[.]com, enabling pop-ups, redirects, and Cloudflare-mimicking iframes—update themes, tighten permissions, and monitor scripts to secure sites.