Hackers Use Fake CleanMyMac Site to Deploy SHub Stealer and Hijack Crypto Wallets

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A convincing fake website posing as the popular Mac utility CleanMyMac is actively pushing dangerous macOS malware called SHub Stealer onto unsuspecting users. The site, hosted at cleanmymacos[.]org, has no …

BoryptGrab Stealer Spreads via Fake GitHub Repositories, Stealing Browser and Crypto Wallet Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A new data-stealing malware called BoryptGrab has been quietly spreading across Windows systems through a network of fake GitHub repositories, tricking users into downloading what appear to be popular free …

Iran-Linked Hackers Target U.S. Critical Infrastructure Amid Rising Cyber Threat Activity

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Iranian advanced persistent threat group known as Seedworm — also tracked as MuddyWater, Temp Zagros, and Static Kitten — has been found actively operating inside the networks of multiple …

MaaS VIP Keylogger Campaign Uses Steganography and In-Memory Execution to Steal Credentials at Scale

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sophisticated credential-stealing campaign built around a tool called VIP Keylogger has emerged as a serious threat to organizations and individuals. Unlike conventional malware that drops files onto a victim’s …

Signal Confirms Targeted Phishing Attacks Resulting in Account Takeovers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Signal has officially confirmed an ongoing wave of targeted phishing campaigns resulting in successful account takeovers for high-profile users, including journalists and government officials. The encrypted messaging service explicitly stated …

Vietnam-Based Cybercrime Network Enables Fraudulent Account Signups at Scale

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A sprawling cybercrime ecosystem rooted in Vietnam has been linked to large-scale fraudulent account registration campaigns targeting service providers and online platforms worldwide. Researchers traced this activity to an infrastructure …

Security Risk Advisors Releases “The Purple Perspective 2026” Report

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Philadelphia, PA, United States, March 9th, 2026, CyberNewswire Security Risk Advisors (SRA) is proud to announce the release of its inaugural report, The Purple Perspective 2026. This comprehensive analysis examines real-world …

M365Pwned – Red Team GUI Toolkit for Microsoft 365 Exploitation via Graph API

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A red teamer operating under the handle OtterHacker has publicly released M365Pwned, a pair of WinForms GUI tools designed to enumerate, search, and exfiltrate data from Microsoft 365 environments using …

ClipXDaemon Emerges as C2-Less Linux Clipboard Hijacker, Targeting Crypto Wallets in X11 Sessions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly discovered Linux malware named ClipXDaemon has emerged as a direct financial threat to cryptocurrency users in X11-based desktop environments. Unlike conventional malware that depends on command-and-control (C2) servers …

Critical Nginx UI Vulnerabilities Allow Attacker to Download a Full System Backup

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Nginx UI Vulnerabilities A newly discovered critical vulnerability in Nginx UI allows unauthenticated attackers to download and decrypt full system backups. Tracked as CVE-2026-27944, this flaw is categorized as CWE-306 …