FBI Seizes Microscan and FishHub Domains Behind File-Theft Operations
FBI seizures expose how Microscan hid scans behind infected devices and FishHub delivered file-stealing malware. Blocking domains does not clean victim networks.
Fake Offline Maps Lead Android Users to a Telegram App Trap
Cyberpolice warns that free navigator ads lead through Telegram to a malicious app. Check installation access and separate phone cleanup from bank recovery.
MATCHBOIL Hides a Backdoor Behind a Fake Planner
ESET traces MATCHBOIL’s fake planner, hidden execution mode and two-minute callbacks in Ukraine. Why a normal-looking window cannot clear a suspicious download.
SgrmBroker.exe: Is It Safe, and What Does Event 7023 Mean?
Check the exact SgrmBroker.exe event before changing Windows: separate the historical Event 7023 error, a missing file, a real crash and a suspicious copy.
Noir Wallet Drainer Uses DNS to Keep Fake Crypto Pages Working
Infoblox traces Noir’s wallet-permission trap and DNS backend rotation. Why connecting, signing and disconnecting a wallet mean different things.
Fake Event Invitations Turn QR Codes Into Google Phishing
Talos traces real event details, altered poster QR codes and a live Google sign-in relay. Verify the invitation’s destination before entering account data.
NEBULA: Fake AI SDKs Install a Hidden Windows RAT
CloudSEK links seven fake npm AI SDKs to a Windows RAT. The install hook, not the apparent client, drops a console-host lookalike before import.
BlueKit Phishing: A Stolen Session Can Outlast the Login
New BlueKit research tracks subscription phishing tools. Its remote-browser technique explains why account recovery needs session checks, not just a new password.
Fake Invoice PDFs Install Action1 Remote-Access Agent
SANS traced fake payment and DHL PDFs to scripts that display a decoy document while installing Action1. Check what ran before treating the agent as malware.
ASOS Customer Profiles Stolen After Employee Impersonation
BBC finds shopping searches and detailed customer profiles in stolen ASOS data. The company describes employee impersonation; platform claims remain distinct.
Cronigame.exe: Discord Game-Test Scam Warning
Received cronigame.exe from a Discord friend? See what the report establishes and what to do if you downloaded, blocked, or ran the game file.
Blinder Tunnel: Fake Dubai Airports Job Test Runs Malware on Project Open
Unit 42 traced a fake Dubai Airports job test that ran malware when a Visual Studio project opened, then used GitHub for commands and fallback routing.
