Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox

CVE-2024-4367-PoC This Proof of Concept PoC demonstrates the...

Malicious code in dcbotoffline3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 80a535a6580b99aa10e80e810002076c68ae79c44c9fb17caff1f59978ebaaa7 Starting the module runs an infostealer targeting browsers and Discord data --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in dcbot-online (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a2b2d82d9610b559f44aa1473f097c56b8f87a6297941604807a0ec56bf2abf4 Starting the module runs an infostealer targeting browsers and Discord data --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2025-191714 Malicious code in dcbot-online (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a2b2d82d9610b559f44aa1473f097c56b8f87a6297941604807a0ec56bf2abf4 Starting the module runs an infostealer targeting browsers and Discord data --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2025-191715 Malicious code in dcbotoffline3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 80a535a6580b99aa10e80e810002076c68ae79c44c9fb17caff1f59978ebaaa7 Starting the module runs an infostealer targeting browsers and Discord data --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in requests-async (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...

MAL-2025-618 Malicious code in requests-async (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...

Trend Micro Managed XDR Analysis of Infection From Fake Installers and Cracks

Our research shows how attackers use platforms like YouTube to spread fake installers via trusted hosting services, employing encryption to evade detection and steal sensitive browser data...

Trend Micro™ Managed XDR Analysis of Infection From Fake Installers and Cracks

Our research shows how attackers use platforms like YouTube to spread fake installers via trusted hosting services, employing encryption to evade detection and steal sensitive browser data...

MAL-2025-47 Malicious code in walletcore-gen (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...

MAL-2025-46 Malicious code in solanacore (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...

Malicious code in requesr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b792f17b467610a1021820a7718884aa436487a9ec75d5ebf889d400efeaec24 Importing the module downloads and starts an infostealer attempting to exfiltrate data and establishing persistence through autorun directory. --- Category:...

MAL-2024-12308 Malicious code in my-main-manager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ac004ff76ebc011d60ae86c56b7f57ddb6ac0d24ff0ddd9ad777319775f79282 While the package appears to be a manager for Windows service, the linked executable is an infostealer with capabilities like cookie stealing ang keylogger. Th...

Malicious code in pycryptographylibv3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 961e4f12709e7f7b2cceaca041246d901647f258e22b2930e53a181dbe0c52ef Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2023-12-bananasqua...

Malicious code in pipcolorpkgv2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a95f9f4af9619a03c6116af22cc53f289c869d09569629216fd32ea12a5a63cc Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2023-12-bananasqua...

MAL-2024-12330 Malicious code in pycryptographylibv3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 961e4f12709e7f7b2cceaca041246d901647f258e22b2930e53a181dbe0c52ef Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2023-12-bananasqua...

MAL-2024-12324 Malicious code in pipcolorpkgv2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a95f9f4af9619a03c6116af22cc53f289c869d09569629216fd32ea12a5a63cc Importing the module starts an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2023-12-bananasqua...

New SteelFox Malware Posing as Popular Software to Steal Browser Data

SteelFox malware targets software pirates through fake activation tools, stealing credit card data and deploying crypto miners. Learn…...

CVE-2024-20511

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user o...

Malvertising Campaign Hijacks Facebook Accounts to Spread SYS01stealer Malware

Cybersecurity researchers have uncovered an ongoing malvertising campaign that abuses Meta's advertising platform and hijacked Facebook accounts to distribute an information stealer known as SYS01stealer. "The hackers behind the campaign use trusted brands to expand their reach," Bitdefender Labs...