A ClickFix campaign has shifted from tricking users into running commands on their computers to persuading them to inject ...

JSCeal hides crypto-stealing malware in V8 bytecode, but researchers built a tool to decompile it and expose its advanced ...

A hacking group is targeting developers with fake coding challenges that hide cross-platform malware, infecting Windows, ...

Learn how cybercriminals build advanced phishing pages using automated PaaS kits, AI tools, and cloud platforms to bypass ...

Cybersecurity researchers have uncovered 24 malicious npm packages that abuse package mirror services to host obfuscated phishing pages. The packages do not infect a device when a developer downloads ...

On July 11, 2026, version 8.14.0 of jscrambler was published to npm carrying a malicious preinstall hook that drops and executes a platform-specific native binary on Linux, Windows, and macOS.

这是从 Cocos Creator 2.x 版本迁移到 3.x 的代码混淆插件，基于 javascript-obfuscator实现。 # CI 构建脚本示例 cp ./ccc-obfuscated-code-export.json ./local/ccc-obfuscated-code.json # 然后执行 Cocos Creator 命令行构建 cc build -p android ...

The malware blends data theft with remote code execution, “turning a financially motivated stealer into a lightweight backdoor,” Microsoft said. Microsoft Threat Intelligence is warning Windows users ...

This script struggles with NEW patterns that are constantly appearing and thus is not guaranteed to work if at all. As of the update to the README, the obfuscated script file has a significantly ...

In our previous research, we analyzed a Windows infostealer we track as NWHStealer. The attackers behind this stealer are continuously finding new methods to distribute the stealer. During our hunting ...

lightning: Obfuscated JavaScript Credential Stealer Bundled in PyPI Wheel On April 30, 2026, a supply chain compromise was identified in the lightning PyPI package — versions 2.6.2 and 2.6.3. The ...

Two phishing campaigns, each using a different stealthy infection technique, are targeting organizations in attacks which aim to deliver data stealing malware to devices running on Microsoft Windows.