Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.
Research shows that even simple Chrome extensions can quietly invade user privacy, with some hijacking clipboards, ...
A new malware-as-a-service (MaaS) called 'Stanley' promises malicious Chrome extensions that can clear Google's review ...
Anthropic credited the Model Context Protocol, or MCP, for the ability to integrate apps into Claude. The extension, called MCP Apps, “lets any MCP server deliver an interactive interface within any ...
A worker searching for an adblocker ended up installing malware instead after threat actor KongTuke pushed a fake Chrome ...
A malicious extension impersonating an ad blocker forces repeated browser crashes before pushing victims to run ...
A malvertising campaign is using a fake ad-blocking Chrome and Edge extension named NexShield that intentionally crashes the ...
ClickFix variant CrashFix relies on a malicious Chrome extension to crash the browser and trick victims into installing the ...
Researchers uncovered a CrashFix campaign where a fake Chrome ad blocker crashes browsers to trick users into installing the ...
The phishing campaign shows how attackers continue to weaponize legitimate cloud services and open source tools to evade detection and gain trust.
Running LLMs just got easier than you ever imagined ...