Candiru Spyware Delivered via Zero-Click Targeted Ads at Al Jazeera
Candiru spyware was installed on Al Jazeera devices through zero-click attacks leveraging malicious targeted advertisements, demonstrating a sophisticated infection vector.
Tag
#Endpoint Security
6 results in the archive.
REVSTEALER Modules Disable Windows Defender to Run Crypto Miner
Elastic Security Labs identified four REVSTEALER-associated programs that disable Windows Update and Defender to deploy a cryptocurrency miner, persisting even after the main stealer removes itself.
BraZetsu Malware Turns Windows Hosts Into Underground Marketplace Assets
Researchers identify BraZetsu, a Python-based Windows malware that enables Initial Access Brokers to commercialize compromised systems as marketplace inventory.
Akira ransomware disables EDR via Safe Mode, steals data but no encryption
An Akira ransomware affiliate bypassed endpoint detection by rebooting the infected system into Safe Mode with Networking to disable the EDR solution, stealing data without encrypting files.
Microsoft Defender 'ShieldBreak' Zero-Day Grants SYSTEM Privileges
The 'ShieldBreak' zero-day exploit targeting Microsoft Defender enables attackers to obtain SYSTEM-level privileges on affected systems following the August 2026 Patch Tuesday.
Fake Claude app promoted via Bing ads spreads SectopRAT malware
A malvertising campaign on Bing promotes a fake Claude desktop app from a legitimate domain to deliver SectopRAT malware, posing a threat to affected systems.