Modern PDF platforms are becoming high-risk attack surfaces

Modern PDF platforms can now function as full attack gateways rather than passive document viewers.

CTM360: Lumma Stealer and Ninja Browser malware campaign abusing Google Groups

CTM360 reports 4,000+ malicious Google Groups and 3,500+ Google-hosted URLs used to spread the Lumma Stealer infostealing malware and a trojanized "Ninja Browser." The report details how attackers ...

JS文件里的秘密：500 万款 App 洞察，4.2 万个密钥裸奔

IT之家 2 月 18 日消息，网络安全公司 Intruder 上月发布报告，深度扫描全球 500 万款应用，发现超过 4.2 万个机密信息（Secrets）以明文形式暴露在 JavaScript 文件中。 IT之家援引博文介绍，本次报告目标重点排查隐藏在 JavaScript 打包文件中的机密信息，扫描生成的纯文本报告超过 100MB，共计发现超过 ...
The Hacker News

Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware Staging

Microsoft details a new ClickFix variant abusing DNS nslookup commands to stage malware, enabling stealthy payload delivery and RAT deployment.