An online version is available at obf-io.deobfuscate.io ...

The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm ...

The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.

Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, ...

Microsoft Threat Intelligence is warning Windows users about a cryptocurrency clipper strain of malware transmitted via USB drives. The malware, which has been affecting users since February, steals ...

The malware blends data theft with remote code execution, “turning a financially motivated stealer into a lightweight backdoor,” Microsoft said. Microsoft Threat Intelligence is warning Windows users ...

June 19, 2026 update: Microsoft assesses with high confidence that this activity is attributable to Sapphire Sleet, a North Korean state actor that primarily targets the financial sector. The ...

North Korean hackers are targeting open source software developers with a backdoor and an information stealer as part of a ...

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social ...

The latest email threats: real Microsoft login phishing, device code scams with a kill switch, split-click attacks, and the ...