Threat Research

A targeted campaign is using phishing emails with fake resume (CV) attachments to infect French-speaking corporate environments with heavily obfuscated VBScript malware....

A new Android malware campaign targets Hindi-speaking users in India by impersonating popular banking apps. Spread via phishing websites, it steals personal and financial data and secretly mines Monero cryptocurrency using XMRig, triggered by Firebase Cloud Messaging....

Blitz is a Windows-based malware first discovered in 2024 and actively developed into early 2025. It spreads via backdoored game cheats and operates in two stages: a downloader and a bot payload. The malware’s developer abused Hugging Face Spaces—a platform for hosting AI models—as part of Blitz's command and control (C2) infrastructure....