Threat Overview In late December 2025, security researchers uncovered a sophisticated supply‑chain attack that leveraged the Visual Studio Code ecosystem to deliver a multi‑stage malware payload. The attack was initiated through a seemingly innocuous extension named
Continue ReadingMonth: December 2025
DNS Reveals SSO Attack Infrastructure
In a recent intelligence briefing released on December 3, 2025, the security community was alerted to a sophisticated campaign that leverages the open‑source Evilginx 3.0 framework to compromise single sign‑on (SSO) services across higher‑education institutions in
Continue ReadingArkanix Stealer New Profit Malware
Arkanix Stealer: New Profit Malware In the rapidly evolving landscape of cybercrime, a new threat has emerged that underscores the ease with which attackers can launch profitable operations. The Arkanix Stealer, first reported by AlienVault on
Continue Reading