Ransomware Targets Hospitals, Supply‑Chain Breaches Spike – New Regulator Guidance
Malwarebytes’ weekly recap for March 2‑8 shows a sharp rise in ransomware activity, with attackers focusing on medical facilities
LummaStealer Teams with CastleLoader to Mask Activity as Normal User Behavior
The LummaStealer infostealer has been observed integrating the CastleLoader dropper, creating a hybrid payload that blends malicious actions with typical
Long‑Term CL‑UNK‑1068 Campaign Exploits DLL Sideloading and Custom Proxies
Palo Alto Networks’ Unit 42 uncovered a previously undocumented threat actor group, labeled CL‑UNK‑1068, that has been compromising
Fake Google Meet Update Deploys Remote‑Access Trojan with One Click
A new phishing campaign observed by Malwarebytes distributes a malicious executable masquerading as a Google Meet update. The file is
AI‑Powered Attack Playbook: How Threat Actors Weaponize Polymorphic Code
Microsoft’s security blog details a new tradecraft where adversaries harness generative AI to create constantly changing (polymorphic) payloads, automate
LummaStealer Teams Up with CastleLoader, Expanding Credential Theft Ops
Bitdefender’s latest research shows the dormant LummaStealer infostealer has resurfaced, now bundled with the CastleLoader droploader. The combined malware
Fake Google Meet Update Delivers Full‑Control RAT to Enterprises
A phishing campaign is distributing a counterfeit Google Meet “update” dialog that mimics the legitimate UI. When a user clicks
APT TA423 Weaponizes Australian News Sites to Drop ScanBox Keylogger
A newly identified watering‑hole operation linked to APT group TA423 is compromising popular Australian news websites. The attackers have
LummaStealer Returns with CastleLoader, Mimics Legit User Activity to Slip Past Defenses
The LummaStealer infostealer has resurfaced, now bundled with the CastleLoader dropper. This refreshed version adopts user‑like patterns—such as
Fake Google Meet Update Delivers Remote‑Access Malware to Victims
Attackers circulated a phishing campaign that mimics a legitimate Google Meet client update. Recipients receive an email with a bogus
