Windows is a bit of a hoarder.

Latrodectus is a Windows loader that downloads other malware, seen in phishing and ClickFix attacks. See what it does, how to ...

Amadey is a Windows trojan bot that downloads other malware such as stealers. See how it spreads, what it leaves behind and ...

Siemens has confirmed active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center ...

I have been writing a series of articles about the email software Thunderbird, and finally, I tried performing a backup and ...

The MALFEX-linked npm package imgdecode uses a Windows DLL to fetch and decrypt a GitHub payload before injecting it into ...

I heard that IK Multimedia's amp simulator "TONEX" had evolved with version 2, so I immediately updated to 2.1.1, but I ran ...

Siemens identified the activity to be from the Romulus multi-platform ClickFix campaign, with Siemens Software Center users ...

Attackers abused fake ChatGPT Custom GPTs and ClickFix to deliver a multi-stage RAT, hiding payloads behind signed software.

Siemens has confirmed the active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center ...

CastleStealer upgrades target Windows users, bypassing browser encryption, executing remote commands and stealing sensitive data.

Eight malicious npm packages downloaded 40,767 times deliver Overlord RAT, a Node.js stealer, and a downloader to Windows systems.