The WeaselBiscuit Threat: Anatomy of a Lightweight JavaScript Stealer in npm

Analysis of the WeaselBiscuit JavaScript stealer spreading via 13 npm packages to harvest sensitive Chrome extension data and developer credentials.

#npm #Malware

Read more →

Data Breaches Digest - Week 38 2026
www.dbdigest.com/2026/09/data...
#databreach #databreaches #databreachesdigest #dataprivacy #GDPR #HIPAA #cybersec #cybersecurity #infosec #informationsecurity #cyberattack #hacked #malware #phishing #ransomware

One Kit, Forty Companies: How a Malware-as-a-Service Platform Used GitHub as a Distribution Network for its Campaign #malware

WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials #malware

PhantomRaven: An LLM-Generated Information Stealer Developed for Bug Bounty Hunting #malware

Hackers Turn Telegram Into a Command Center for HEAVYGRAM Surveillance Malware

https://commons.now/link/hackers-turn-telegram-into-a-command-center-for-heavygram-surveillance-malware

#Malware #Surveillance #Telegram

BragJack attack hijacks AI agents in browsers like Chrome, Edge, Opera via malicious extensions. #SecurityNews #BrowserSecurity #AI #Malware #PromptForcing #AIagents #CyberSecurity https://thedailytechfeed.com/bragjack-flaw-lets-browser-extensions-hijack-ai-assistants/

hxxps://uwaiskdas.com/download/point/
#Phishing #フィッシング詐欺 #malware

楽天を装ったAndroidマルウェア
hxxps://polisdaaqopx.com/download/point/
hxxps://suwakdsdowa.com/download/point/
hxxps://uywajjsaiqas.com/download/point/
hxxps://oiuwaksdiw.com/download/point/
hxxps://poiwaksuwa.com/download/point/
#Phishing #フィッシング詐欺 #malware

⏱ Caught early: npm [email protected] was on our radar 29 days before MAL-2026-16255 went public.

#flaggedfirst #npm #malware #supplychainsecurity

📊 In the last day: 3 malicious packages caught across npm, a median 3 days ahead of the public advisory. We were first on 8%.

#malware #supplychainsecurity #opensource

@sentinelone.com
DPRK actors used fake job lures and weaponized Terraform files to deploy FLATROOF and ROOFDECK on developer Macs.
-
IOCs: grenight[.]com, 176[.]97[.]114[.]232, 45[.]11[.]59[.]140
-
#Malware #ThreatIntel #TraderTraitor

China's Salt Typhoon Deploys New Malware in Latin America

#Cyberattack #China #Malware

https://singulism.com/en/2026-09-18-salt-typhoon-latin-america-backdoor/

Heads-up, #Android users on this rat-bastard #malware!
hothardware.com/news/rathat-...

Chinese hackers use #SparroWocky #malware in govt #espionage attacks

https://www.bleepingcomputer.com/news/security/chinese-hackers-use-sparrowocky-malware-in-govt-espionage-attacks/

#China #cybersecurity

APT36’s new RapidRust campaign uses Rust backdoors, GitHub C2, USB spread & media typosquats in India/Afghanistan. #Cybersecurity #APT36 #Rust #OperationRapidRust #GitHubC2 #Malware thedailytechfeed.com/apt36-unveil...

netbe.pl/chrome-under...

#Cybersecurity #InfoSec #CVE #Vulnerability #Security #CyberAttack #Exploit #Malware #Ransomware

Beware the SparroWock: The backdoor that bites, the commands that catch #malware

New Android Malware Steals Banking PINs and Reinstalls Itself After Users Delete It

https://commons.now/link/new-android-malware-steals-banking-pins-and-reinstalls-itself-after-users

#Android #Banking #Malware

Iranian hackers use #CHOSENBRICK #Windows #malware to spy on targets

https://www.bleepingcomputer.com/news/security/iranian-hackers-use-chosen-brick-windows-malware-to-spy-on-targets/

#Iran #cybersecurity