ThreatVectr
Tag

#malware

81 stories taggedmalware · page 3 of 6.

A web browser window displaying a convincing CCleaner download page clone, with system notification alerts appearing in the background suggesting malicious acti
Threat Intelligence

Fake CCleaner site turns Chrome into a spying and password-theft tool

Criminals built a convincing copycat download page for one of the world's most-downloaded PC tools, then used it to silently hijack Google Chrome and steal passwords, bank details, and screenshots.

4 min read
Close-up of a credit card being held over a glowing smartphone screen displaying a streaming service login page, with warning indicators and suspicious ad banne
Threat Intelligence

Fake 'Watch The Odyssey Free Online' Sites Are Stealing Bank Details From Film Fans

Criminals are buying ads for bogus streaming pages tied to the summer's biggest blockbuster. If you hand over your card number for the 'free trial', your money goes with it.

3 min read
A browser window with multiple tabs open, one tab showing a disguised affiliate link redirecting, subtle visual glitch or redirect animation captured mid-frame,
Threat Intelligence

Banned Chrome Extension Returns With Hidden Affiliate Scam, and Security Researchers Warn the Next Version Could Be Worse

A browser add-on pulled from the Chrome Web Store for stealing AI chat conversations is back, and it's now quietly opening affiliate links on users' computers every time it updates.

4 min read
Illustration: A split-screen
Threat Intelligence

Marcus Hutchins: The Accidental Hero Who Once Wrote the Code He Later Helped Stop

The man who halted one of history's most damaging cyberattacks spent years on the wrong side of the line first. His story is worth understanding.

3 min read
A criminal operation workspace visualization showing multiple screens with AI chatbot interfaces open, malicious code being generated and refined, with cloud ac
AI Security

Criminals Are Using AI Like a Work Tool. Researchers Have the Receipts.

Two major studies show hackers using AI assistants to write malicious code, dodge safety filters, and compress attacks from weeks into hours. Cloud activity tied to this shift jumped 171 percent in the first half of 2026.

4 min read
A browser window showing a fake macOS download page with a security warning overlay and multiple domain names partially visible in the address bar or browser ta
Threat Intelligence

Fake Mac Downloads Hide Behind 250+ Domains That Screen Visitors First

Microsoft says a large ClickFix network now checks who is knocking before showing macOS users a booby-trapped installer, keeping researchers and scanners out of view.

3 min read
A code repository or npm package manager interface on screen showing package listings, with an Ethereum blockchain explorer window open in the background displa
Threat Intelligence

Malicious npm Packages Hide Attacker Servers Inside Empty Ethereum Transactions

Researchers found two booby-trapped code libraries pulling instructions from fake wallet addresses on the Ethereum blockchain, a twist on the EtherHiding trick now dubbed NullReceiver.

4 min read
Computer screen showing browser cache folder with PNG image files, malware analysis software running in background, code and command-line interfaces visible wit
Threat Intelligence

DOUBLECUP: the new Russian malware service that hides code inside cached images

A service called DOUBLECUP tricks users into pasting rogue commands, then pulls malware out of PNG files sitting in the browser's cache.

3 min read
Teenager's gaming setup with multiple monitors showing Roblox game interface alongside security warning alerts, malware detection software running, concerned ex
Threat Intelligence

Fake Roblox Cheat Tool Hides Password Stealer and Remote Spy Software

Bitdefender says a months-long campaign is pushing booby-trapped copies of the Xeno script runner to Roblox players, planting malware that steals browser logins, drains crypto wallets and hands attackers full control of the PC.

4 min read
Developer workspace with code editor displaying npm package registry interface, malicious package listings highlighted, security scanning tools running in backg
Threat Intelligence

Fake npm Packages Pose as Alibaba Developer Tools, Drop Remote-Control Malware

Researchers found 18 booby-trapped packages on the npm registry aimed at Chinese-speaking developers, using a classic name-squatting trick to smuggle in a cross-platform remote access trojan.

4 min read
Security researcher at workstation displaying Chrome browser and password manager interface, malware attack path diagrams and vulnerability demonstrations on mu
Identity & Access

Malware Can Silently Hijack Chrome Passkeys, Researchers Show

Palo Alto's Unit 42 details three attack paths against Google Password Manager that let ordinary user-level malware sign in without a fingerprint, PIN, or on-screen prompt.

3 min read
A web browser showing the new tab page with unwanted extensions being blocked by a security shield overlay, malware being prevented from masquerading as adminis
Vulnerabilities

Chrome Moves to Block Malware That Hijacks Your New Tab Page

Google is testing a defence that stops malicious software from posing as an IT administrator to lock unwanted extensions into consumer Chrome installs on Windows and macOS.

4 min read
A legal office interior with computer workstations active but unattended, email client windows visible on screens, a single suspicious message highlighted among
Threat Intelligence

Law Firm Hit by Spear-Phishing Attack Using New 'HollowFrame' Loader and Rust-Based 'Matryoshka' Backdoor

Researchers say a fake email delivered a chain of hidden tools that quietly gave attackers control of a law firm's Windows machines.

3 min read
A hacker's workspace with AI chatbot interface running on one monitor, malware code editor on another, pop-up windows mimicking legitimate software alerts scatt
Threat Intelligence

ESET report: criminals are teaching AI new tricks, and old malware new manners

The Slovak security firm's latest threat report says attackers are wiring AI assistants into their toolkits, dressing up scams as helpful pop-ups, and building ransomware that switches off the guards before it strikes.

3 min read
A government building at night with digital surveillance tools and malware signatures floating in the darkness, with Telegram messaging interface visible in the
Threat Intelligence

China-Linked Hackers Hit Middle East Governments With New Malware That Hides in Telegram

Zscaler researchers say a group tied to East Asia is running fresh spy operations against government networks, using three never-before-seen tools.

3 min read
© 2026 Threat Vectr