The Russian state-backed Star Blizzard hacker group has ramped up operations with new, constantly evolving malware families ...

The Coldriver hacking group reportedly shifted its operation quickly after the May 2025 public disclosure of its LostKeys ...

Google reveals COLDRIVER’s new malware families NOROBOT, YESROBOT, and MAYBEROBOT amid rising cyber espionage.

Google threat researchers in May publicized the Russian-based threat group Coldriver's LostKeys credential-stealing malware. However, five days later, the bad actors launched three new malware ...

Star Blizzard has been using a new backdoor in attacks after its LostKeys malware was detailed in a public report in June.

Researchers caution that the group’s rapid pivots and targeted filtering complicate detection and require behavior-based ...

Russia-linked threat group COLDRIVER rapidly replaced its exposed malware with a stealthier PowerShell variant, using fake CAPTCHA prompts and cryptographic ...

Researchers expose Discord webhook C2 in npm, PyPI, RubyGems; North Korean actors published 338 malicious npm packages with ...

“If you have already clicked on the link and provided your credentials, we recommend changing your password on PyPI immediately,” Larson warned. “Inspect your account's Security History for anything ...

North Korean threat group Famous Chollima is using blockchain technology to hide malware payloads in smart contracts, which ...

EtherHiding’: Nation-state and cybercriminal groups are leveraging smart contracts as command-and-control servers for ...