DeepLoad exploits ClickFix and WMI persistence to steal credentials, enabling stealth reinfection after three days.
Russian CTRL toolkit spread via malicious LNK files in February 2026, routing C2 through FRP-tunneled RDP to evade detection.
A new service on the cybercrime market provides automated capabilities to create persistent information-stealing social ...
GitHub has been drawn into another cyber threat case after researchers uncovered a multi-stage malware campaign using ...
Venom Stealer is a new malware-as-a-service tool using ClickFix scams to steal credentials, hijack sessions and automate ...
SysInternals Suite - This is very old (and very popular) utility suite from Mark Russinovich got an update recently where you'll find some new tools and ...