PHANTOMPULSE spreads via Obsidian plugin abuse in REF6598 campaign, targeting finance and crypto users, bypassing AV controls ...
CERT-UA links the AgingFly credential-stealing campaign to phishing, browser theft, and modular remote access.
网络安全研究人员发现,威胁行为者正在滥用广受欢迎的笔记工具 Obsidian 的 Shell Commands 社区插件,在不利用任何软件漏洞的情况下,悄无声息地在受害者设备上执行恶意代码。该攻击活动被追踪为 ...
JanelaRAT hits Latin American banks with 14,739 attacks in Brazil in 2025, enabling credential theft and financial espionage ...