Gootloader JavaScript malware, commonly used to deliver ransomware, is back in action after a period of reduced activity.

China-linked APT24 hackers have been using a previously undocumented malware called BadAudio in a three-year espionage campaign that recently switched to more sophisticated attack methods.

In the new campaign, Gootloader was most likely leveraged by a group known as Storm-0494, as well as its downstream operator, ...

A widely-adopted JavaScript library has been found carrying a critical vulnerability which could allow threat actors to ...

Huntress finds three GootLoader infections since Oct 27, 2025; two led to domain controller compromise within 17 hours.

eFile.com, an IRS-authorized e-file software service provider used by many for filing their tax returns, has been caught serving JavaScript malware. Security researchers state the malicious JavaScript ...

A newly discovered cross-site scripting attack uses a sly variant on an existing hack to deliver malware in a way that’s so heavily obfuscated, even experts didn’t notice it at first. Said experts ...

AutoIt, a scripting language for automating Windows interface interactions, is increasingly being used by malware developers thanks to its flexibility and low learning curve, according to security ...

WordPress is one of the most popular content management systems on the Internet. In fact, more than 43 percent of all websites run on WordPress. This makes the latest attack on WordPress sites by a ...

In context: Since the first computer virus, malware has been a cat-and-mouse game between hackers and security researchers. It's to the point where most malware is known, at least in type and delivery ...