Ransomware threat actors tracked as Velvet Tempest are using the ClickFix technique and legitimate Windows utilities to deploy the DonutLoader malware and the CastleRAT backdoor.

IntroductionIn January 2026, Zscaler ThreatLabz observed activity by a suspected Iran-nexus threat actor targeting government officials in Iraq. ThreatLabz discovered previously undocumented malware ...

Transparent Tribe uses AI tools to mass-produce polyglot malware targeting India using Slack, Discord, and Google Sheets C2.

Threat actors are employing a new variation of the ClickFix social engineering technique called InstallFix to convince users into running malicious commands under the pretext of installing legitimate ...

Windows 11 feeling bloated? Sophia Script lets you reshape the OS from the inside out. Here's how it works.

OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users ...

Signed malware backed by a stolen EV certificate deployed legitimate RMM tools to gain persistent access inside enterprise ...

I love Express Script, they are great! I get my meds cheap and the pharmacist are all helpful. I cannot say that for all customer service people but they do a great job as well. Just like every ...

Mary Hall is a editor for Investopedia's Advisor Insights, in addition to being the editor of several books and doctoral papers. Mary received her bachelor's in English from Kent State University with ...