The US offers a $10 million reward for Amir Yaryab, an IRGC cyber commander linked to CyberAv3ngers attacks on critical water infrastructure.

Related Posts:

• Mirage Kitten Malware Targets Aviation and Fintech Sectors
• Coder Registry Attack: Hijacked Cloudflare Pool Served Malicious Terraform Modules
• Toy Ghouls Backdoor Uses HiveMQ and Element for C2

The post US Offers $10M for IRGC Cyber Leader appeared first on Daily CyberSecurity.

The Fire Ant threat actor uses trusted infrastructure compromise to breach high-value targets. Discover how this group evades detection in networks.

Related Posts:

• ValleyRAT Backdoor Spread via Signed Chinese Adware
• UAT-10147 Deploys SPECTRE Cross-Platform Implant
• Kimsuky Spear Phishing Abuses Remote Control Tools

The post Fire Ant Threat Actor Targets Trusted Infrastructure appeared first on Daily CyberSecurity.

This trojanized Slack installer looks normal, but quietly gives attackers an invisible desktop to access your accounts and data. We take a deep dive into the attack.

The post A fake Slack download is giving attackers a hidden desktop on your machine appeared first on Security Boulevard.

Hiding in imposter sites, GitHub downloads, and YouTube links, this infostealer is designed to hijack accounts and drain cryptocurrency wallets.

The post From fake Proton VPN sites to gaming mods, this Windows infostealer is everywhere appeared first on Security Boulevard.

Inside a targeted email campaign that funnels the most vulnerable financial people into handing over sensitive data, and signing up for weekly fees.

The post Credit Resources Vault: Why this credit email set off our scam alarms appeared first on Security Boulevard.

We uncovered two job scams posing as legitimate offers from Coca-Cola and Ferrari that could pry into Google and Facebook accounts.

The post That dream job offer from Coca-Cola or Ferrari? It’s a trap for your passwords appeared first on Security Boulevard.

A fake Avast scan tells you your PC is infected, then installs the malware that steals passwords, session data and crypto wallets.

The post Bogus Avast website fakes virus scan, installs Venom Stealer instead appeared first on Security Boulevard.

A sprawling network of fake shops, all built for one purpose: to steal your payment details and personal data.

The post Inside a network of 20,000+ fake shops appeared first on Security Boulevard.

A fake $TEMU crypto airdrop uses the ClickFix trick to make victims run malware themselves and quietly installs a remote-access backdoor.

The post Fake Temu Coin airdrop uses ClickFix trick to install stealthy malware appeared first on Security Boulevard.

We uncovered a fake CleanMyMac site delivering SHub Stealer, a macOS infostealer that steals credentials and silently backdoors crypto wallets.

The post Fake CleanMyMac site installs SHub Stealer and backdoors crypto wallets appeared first on Security Boulevard.

A fake purchase order attachment turned out to be a phishing page designed to harvest your login details.

The post Purchase order attachment isn’t a PDF. It’s phishing for your password appeared first on Security Boulevard.

A fake Zoom meeting page looks real, triggers a bogus “update,” and silently installs surveillance software.

The post Fake Zoom meeting “update” silently installs surveillance software appeared first on Security Boulevard.

A convincing fake Avast site displays a €499.99 charge and promises a refund. Instead, it harvests your name, address, and full credit card details.

The post Refund scam impersonates Avast to harvest credit card details appeared first on Security Boulevard.

One extra letter in the domain is all it takes to hand over remote control of your system.

The post Fake Huorong security site infects users with ValleyRAT appeared first on Security Boulevard.

Attackers are weaponizing Facebook ads to distribute password-stealing malware masked as a Windows download.

The post Facebook ads spread fake Windows 11 downloads that steal passwords and crypto wallets appeared first on Security Boulevard.

Phishers are using fake Google Forms pages hosted on lookalike domains to trick job seekers into handing over their Google credentials.

The post Job scam uses fake Google Forms site to harvest Google logins appeared first on Security Boulevard.

An AI chatbot posing as Google’s Gemini is being used to pitch fake “Google Coin,” promising 7x returns.

The post Scammers use fake “Gemini” AI chatbot to sell fake “Google Coin” appeared first on Security Boulevard.