Fake CAPTCHA Scam Tricks Windows Users Into Installing Malware

A fake CAPTCHA scam is tricking Windows users into running PowerShell commands that install StealC malware and steal passwords, crypto wallets, and more.
IEEE

HAP-Analyzer: A Hybrid Static, Dynamic, and Memory Analysis Approach for Fileless Malware

Abstract: Fileless malware has become an increasingly prominent threat in contemporary computing environments, largely due to its reliance on in-memory execution and its ability to circumvent ...
Dark Reading

Chinese APTs Hacking Asian Orgs With High-End Malware

China-linked advanced persistent threat (APT) groups are wreaking havoc in Asia with new cyber weaponry, targeting Chinese gambling sites and government entities in the region. For instance, Trend ...
CNBC

SK Hynix overtakes Samsung in annual profit for the first time as AI reshapes rivalry

SK Hynix overtook Samsung in operating profit in 2025 for the first time, driven by its dominance in AI memory chips. Samsung's broader business diluted gains as SK Hynix benefited from its focus on ...
Bleeping Computer

New malware service guarantees phishing extensions on Chrome web store

A new malware-as-a-service (MaaS) called 'Stanley' promises malicious Chrome extensions that can clear Google's review process and publish them to the Chrome Web Store. Researchers at end-to-end data ...
The Hacker News

Indian Users Targeted in Tax Phishing Campaign Delivering Blackmoon Malware

Cybersecurity researchers have discovered an ongoing campaign that's targeting Indian users with a multi-stage backdoor as part of a suspected cyber espionage campaign. The activity, per the eSentire ...
Ars Technica

Poland’s energy grid was targeted by never-before-seen wiper malware

Researchers on Friday said that Poland’s electric grid was targeted by wiper malware, likely unleashed by Russia state hackers in an attempt to disrupt electricity delivery operations. A cyberattack, ...
The Hacker News

New DynoWiper Malware Used in Attempted Sandworm Attack on Polish Power Sector

The Russian nation-state hacking group known as Sandworm has been attributed to what has been described as the "largest cyber attack" targeting Poland's power system in the last week of December 2025.
Ars Technica

Kioxia’s memory is “sold out” for 2026, prolonging a “high-end and expensive phase”

The companies that make RAM and flash memory chips are enjoying record profits because of the AI-induced memory crunch—and they’re also indicating that they don’t expect conditions to improve much if ...
SecurityWeek

APT-Grade PDFSider Malware Used by Ransomware Groups

Providing cyberespionage and remote code execution capabilities, the malware is executed via DLL sideloading. A newly identified malware family with advanced capabilities is being used in targeted ...
Infosecurity-magazine.com

Researchers Uncover PDFSIDER Malware Built for Long-Term, Covert System Access

A newly identified malware strain built for covert, long-term access to compromised systems has been documented in recent security research. Dubbed PDFSIDER by Resecurity, the threat is delivered ...