nethost.dll ProtonVPN Cleanup
Found nethost.dll beside ProtonVPN.exe or a fake VPN folder? Learn how to…
sysupdate.jpeg Malware
sysupdate.jpeg malware is a fake image loader tied to Operation SilentCanvas. Learn…
Microsoft Details Kazuar Botnet Used by Secret Blizzard
Microsoft published a technical analysis of Kazuar, a modular Secret Blizzard botnet…
node-ipc npm Package Compromised With Credential Stealer
Malicious node-ipc versions 9.1.6, 9.2.3, and 12.0.1 were published to npm with…
cPanel CVE-2026-41940 Exploited to Drop Filemanager Backdoor
Attackers are exploiting cPanel & WHM CVE-2026-41940 to deploy a Filemanager backdoor,…
PamDOORa Linux PAM Backdoor Turns SSH Login Into a Trap
PamDOORa is a Linux PAM-based backdoor marketed for persistent OpenSSH access and…
Is JDownloader Safe?
JDownloader says attackers changed several official website download links on May 6-7,…
QLNX RAT Targets Linux Developer and Cloud Credentials
Trend Micro reports QLNX, a Linux-focused Quasar RAT variant that combines persistence,…
PyPI ZiChatBot Packages Linked to Suspected OceanLotus Campaign
Kaspersky reports a suspected OceanLotus campaign that used malicious PyPI packages to…
Fake Claude AI Malware: SectopRAT and Beagle
Fake Claude downloads can lead to SectopRAT or Beagle malware. Check the…
Backdoor:Win64/RogueDaemon.LTSN!MTB: DAEMON Tools Alert and Cleanup
Backdoor:Win64/RogueDaemon.LTSN!MTB is a Microsoft Defender alert linked by users to the DAEMON…