Fake Invoice PDFs Install Action1 Remote-Access Agent
SANS traced fake payment and DHL PDFs to scripts that display a decoy document while installing Action1. Check what ran before treating the agent as malware.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 8, 2026
Latest reports
ShinyHunters Suspect Rey Reportedly Detained in Jordan
Reuters reports a ShinyHunters suspect is helping investigators. The reported detention does not establish that stolen records were recovered or erased.
MVS Warns Fake Browsing Fines Can Lead to Bank-Data Theft
Ukraine’s MVS warns about fake website-browsing fines. See how the payment lure seeks bank details and what changes if you already shared information.
BPFDoor and AVERAT Hide Linux Access in Mail-Gateway Traffic
Rapid7 found Linux implants using deleted executables, daemon disguises and SMTP control traffic. What mail-gateway operators should investigate.
iCloud Sender Spoofing Passed Email Authentication in Newly Disclosed Research
New iCloud research explains how forged sender addresses passed SPF, DKIM and DMARC. The flaws were fixed in December 2025; see what the checks…
MetaMask Staking Exits Validators After Reward Payments Were Diverted
MetaMask is exiting affected validators after diverted rewards. The 0.36 ETH payment total and 565,056 ETH exit estimate describe different controls.
Free Mobile Phishing Turns a €9.99 Bill Into a Card-Data Trap
A documented Free Mobile phishing email uses a €9.99 debt and a disguised link to reach a fake card-payment form. Check the account independently.
Fake xStocks and Pendle Votes Lure Users to Wallet Permissions
A new investigation finds 70 fake crypto sites. Their reward vote opens a wallet chooser; connection and token-spending approval are different steps.
RedFlick Turns a Phishing Invitation Into Scheduled Windows Tasks
Microsoft traces Star Blizzard’s RedFlick chain: document-looking shortcuts, remote applets and scheduled tasks delivering CosmicPulse.