Macfinger Turns Real Websites Into Fake Mac Verification Traps
SANS tracks Macfinger ClickFix on compromised websites. Learn why a fake browser check is different from running its command on your Mac.
CLOSEDQUORUM: Windows Malware Puts Its Next Move to a Vote
Talos found a Windows implant designed to take votes from four AI providers. The public sample is inert, and real attacks remain unconfirmed.
Trojan:PowerShell/Boxter!MTB: Remove It and Check Repeat Alerts
Check a Trojan:PowerShell/Boxter!MTB alert, remove detected threats, and distinguish new PowerShell activity from old Defender history before restoring files.
GigCluster.exe: Is It a Virus? Check and Remove It Safely
GigCluster.exe using high CPU or GPU? Check a suspected miner, verify the file, remove detected threats, and stop a process that keeps returning.
Fake Drawing Votes Target Telegram Accounts, Ukraine Warns
A fake drawing contest turns a vote into a Telegram login. Ukraine renewed the warning; check unfamiliar sessions if you entered a code.
AWS Quarantined a Leaked Key in 10 Seconds. The Response Wasn’t Over.
Unit 42 measured AWS quarantining a public GitHub key leak in 10 seconds. See what the policy limits, which log signal matters, and why the key still needs replacing.
Talking Tilly: The Camera Keeps Analysing After the Age Check
Talking Tilly requires an age selfie, analyses mood during calls and keeps different records on separate clocks. Here is what the service discloses.
Fake AI Subscription Sites Use Real Google Sign-In
Researchers linked over 100 subscription sites using genuine Google login. Learn why authentication does not verify the seller or cancel a purchase.
Diagnostic Policy Service High CPU: Find What Keeps It Busy
Trace Diagnostic Policy Service CPU spikes to their trigger. Check the host PID, recurring events and devices before changing Windows diagnostics or SRU data.
Service Host Network Service High Network Usage: Find the Download
Identify the service behind heavy Windows network traffic, separate downloads from peer sharing, and choose a bandwidth limit that matches the problem.
State Repository Service High CPU: Find the App Behind It
Trace State Repository Service high CPU to an app, update or Windows error. Use targeted repairs before disabling services or touching the app repository.
PAYLOAD Turns Windows Group Policy Into a Ransom Demand
PAYLOAD attackers used domain policy to display ransom notes without encrypting Windows files. The investigation explains why endpoint cleanup is not enough.
