A threat actor uploaded malicious packages to the Arch User Repository (AUR) that imitated two popular utility tools, yay and paru. AUR is a community-maintained, widely used package index for Arch Linux and derived distributions that hosts package build scripts (PKGBUILDs) for third-party and proprietary tools, beta versions or older package versions that are no … Read more
There is a large global market for low-cost Android devices. Criminals are aware of this and are meeting the demand through devices based on MediaTek platforms – albeit with malware pre-installed in the device firmware. When the recipient of such an affected device turns it on, the malware is present, invisible and available to any … Read more
Daiichi Kosho, a major Japanese entertainment systems manufacturer, announced that a malware infection at its contractor Nippon Columbia exposed more than 8.7 million customer and employee records. The company is the largest karaoke manufacturer in Japan 521 karaoke venues nationwide, including the Big Echo chain, one of the most popular karaoke box chains in the … Read more
A malware campaign dubbed “Midnight Mimosa” has been discovered on low-cost Android smartphones that ship with malware embedded in their firmware, allowing attackers to silently install apps, conduct ad fraud, and turn devices into private proxies. The malware is believed to have been introduced somewhere in the device’s supply chain. However, it remains unclear who … Read more
Russian state actor Star Blizzard is using a new malware installation tactic called “RedFlick” to deploy its signature CosmicPulse backdoor. While the tactic is not a new cybersecurity technique, it is a new delivery approach for the threat actor, allowing them to further automate attacks and reduce interaction with victims. Microsoft researchers say that in … Read more
A new variant of the MacSync information-stealing malware targeting macOS systems is now using public iCloud calendar events to deliver new payloads. MacSync is a Swift-based malware that emerged in April 2025 and was recently delivered in ClickFix campaigns under the guise of Homebrew and macOS disk space analysis tools. Kaspersky researchers say that previous … Read more