The multi-stage campaign targeting South Korea uses weaponized Windows shortcuts and GitHub-based command and control to ...
UAT-10362 spear-phishing targets Taiwanese NGOs in October 2025, deploying LucidRook malware for data exfiltration and ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
Cybercriminals are increasingly prioritizing speed and scalability over technical sophistication. Rather than crafting highly ...
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...
Microsoft's OS is designed for everyone, but optimized for no one ...
What makes the threat notable is the way it narrows the gap between a traditional RAT and an infostealer. Analysts found that STX RAT can give operators covert control of a victim machine through a ...