Significant Malware Campaign Targets WordPress Sites A recent and extensive malware campaign known as Sign1 has compromised over 39,000 WordPress sites over the past six months. The malware employs malicious JavaScript injections, maneuvering to redirect users to fraudulent websites. Notably, within the last two months, this campaign has infected an…
Cybersecurity experts have uncovered a sophisticated campaign targeting vulnerable Tibetan communities around the world, involving the deployment of a malicious Firefox browser extension to gain unauthorized access to Gmail accounts. This operation is attributed to threat actors aligned with Chinese governmental interests, specifically a group identified as TA413. In a…
The Gootkit malware framework, which has been recognized for distributing banking Trojans, has recently undergone significant enhancements that enable it to deliver a broader spectrum of malicious software, including ransomware variants. According to researchers from Sophos, Gabor Szappanos and Andrew Brandt, the Gootkit malware family has been in existence for…
Recent developments have shed light on a critical vulnerability found in Microsoft Edge, which, although patched, posed significant risks to users. This flaw had the potential to allow attackers to covertly install unauthorized browser extensions on users’ systems, facilitating various malicious activities without their consent. Oleg Zaytsev, a security researcher…
Cyberwarfare / Nation-State Attacks, Fraud Management & Cybercrime, Government Three-Year Espionage Campaign Targets Taiwanese Firms Akshaya Asokan (asokan_akshaya) • November 21, 2025 (Image: Shutterstock) Security researchers have uncovered a multi-year espionage operation attributed to a hacking group with suspected ties to the Chinese government. This sustained campaign, lasting three years,…
Online guitar education platform TrueFire has reportedly experienced a significant data breach involving a “Magecart” style attack. This incident raises concerns over the potential exposure of sensitive customer information, including personal and payment card details. TrueFire, a leading online resource for guitar enthusiasts with over one million registered users, grants…
Hackers Exploit Google Analytics to Steal Credit Card Information from E-commerce Sites Cybersecurity experts have unveiled a serious threat affecting e-commerce platforms, where hackers are leveraging Google Analytics to siphon credit card information from unsuspecting users. This alarming trend was reported by industry leaders, including PerimeterX, Kaspersky, and Sansec, highlighting…
Security Flaws Discovered in OkCupid Expose User Data Risks Recent cybersecurity investigations have revealed significant vulnerabilities in the well-known online dating platform OkCupid. These weaknesses have the potential to allow malicious actors to surveil users’ private data or take unauthorized actions within compromised accounts. In a report shared with The…
A recent cyber threat has emerged, linked to the nation-state group known as APT28, which has exploited a vulnerability in the Microsoft Windows Print Spooler service to distribute a custom malware variant named GooseEgg. This security flaw, tracked as CVE-2022-38028, received a high CVSS score of 7.8 and has been…
