Lumma is a malware family tracked across 27 threat clusters and 33 intelligence report mentions on ThreatCluster. First observed October 23, 2025; most recent activity June 30, 2026.
On May 19, 2026, Microsoft disrupted Fox Tempest, a malware-signing-as-a-service (MSaaS) operation that provided over 1,000 fraudulent code-signing certificates to cybercriminals, enabling them to disguise malware as…
Malware developers have successfully bypassed Google's App-Bound Encryption (ABE) in Chrome, allowing infostealers like VoidStealer to access sensitive data such as session cookies and credentials. This new method…
A new Windows loader named OXLOADER is delivering the CASTLESTEALER infostealer through malicious Google Ads. This previously undocumented malware employs advanced obfuscation techniques and abuses the Windows .reloc…
In May 2026, TrendAI™ Research reported on a cyber intrusion involving the ClearFake campaign, where threat actors utilized the EtherHiding technique to deliver payloads via smart contracts on the BNB Smart Chain…
Since late 2025, malware has been proliferating through the Steam Workshop, targeting gamers in China and Russia. Attackers exploit the Wallpaper Engine app to embed malicious code within wallpaper packages, leading to…
The newly identified Venom Stealer malware-as-a-service (MaaS) platform automates credential theft and continuous data exfiltration, posing a significant threat to users. Sold on cybercrime networks, it integrates…
The SilabRAT, a Remote Access Trojan (RAT), has emerged on dark web forums as a Malware-as-a-Service (MaaS) offering since late 2025, priced at $5,000 per month. Developed by the Russian-speaking actor 'o1oo1', it is…
On June 30, 2026, the U.S. Department of Justice announced the seizure of nearly 400 domains involved in illegally streaming the 2026 FIFA World Cup. This operation, named 'Operation Offsides 2026', is the largest…
A surge in cyberattacks utilizing PXA Stealer malware has been reported, primarily targeting financial institutions globally. This increase follows the dismantling of major infostealer operations such as Lumma,…
On World Password Day 2026, experts highlight that traditional password security measures are inadequate against modern threats. Infostealer malware, such as LummaC2 and RedLine, now operates in a…