LeakNet uses ClickFix via compromised sites to gain access, enabling stealth attacks and scalable ransomware operations.

New ClickFix variant maps WebDAV drive to run trojanized WorkFlowy app, enabling stealth C2 beacon and payload delivery.

A new malware strain dubbed Slopoly, likely created using generative AI tools, allowed a threat actor to remain on a compromised server for more than a week and steal data in an Interlock ransomware ...

名为LeakNet的勒索软件团伙已采用通过受损网站传播的ClickFix社会工程学策略作为初始访问方法。

LeakNet ransomware uses ClickFix attacks on hacked sites to trick users into running malicious commands and stealing data.

这些年，如果你还在认真考虑“要不要做一个原生 Windows 应用”，大概率会很快陷入一种说不清的困惑。一方面，这个平台看起来从不缺“新东西”：从 Win32、MFC，到 .NET、WPF，再到后来的 UWP、WinUI ...

Electron lets you build desktop web-UI apps, but requires embedding an entire browser. Electrobun lets you do the same, but by way of the Bun runtime and without ...

An N-day vulnerability in Microsoft Word exposes nearly 14 million assets. Attackers can exploit this flaw to bypass security ...

网络安全研究人员披露，名为Hive0163的威胁组织使用了疑似人工智能生成的恶意软件Slopoly。该恶意软件虽然技术相对简单，但展现了威胁行为者如何利用AI快速开发新的恶意软件框架。Slopoly作为后门程序，能够每30秒向C2服务器发送心跳消息，每50秒轮询新命令并执行。这表明AI辅助恶意软件正在帮助网络犯罪分子加速攻击开发和扩大运营规模。