A new campaign uses fake DocuSign & Gitcodes pages to trick users into manually installing NetSupport RAT, gaining remote control.

A DomainTools report exposes how North Korean IT workers use fake IDs, AI, and shell companies to infiltrate remote tech jobs globally, funding the regime's military and compromising corporate infrastructure.

A new BankBot campaign targets Android users in Indonesia and Vietnam. The malware uses spoofed app stores and a WebSocket-based download for stealth.

Salt Typhoon, a China-MSS linked APT, targets global telecoms and military networks for long-term espionage, exploiting network edge devices for future cyber warfare ops.

DomainTools exposed a Cryptocurrency Drain Conspiracy using a single IP to host scams like MedAI Genesis. Attackers use copied CSS and malicious MobileConfig profiles to drain crypto wallets.

The leak of a fourth episode linked to the APT35 hacking group—also known as Charming Kitten—dramatically reshapes perceptions

A massive data leak from KnownSec, a prominent Beijing-based cybersecurity firm, has exposed the inner workings of a sophisticated, state-aligned cyber espionage apparatus. The leaked documents, i…

DomainTools exposes North Korea’s "mature portfolio model": a compartmentalized cyber strategy designed for mission specialization and attribution resistance.

An extraordinary deluge of DNS traffic overburdened the DomainTools infrastructure to such an extent that a solitary domain generated up to 500,000 novel observations per second during peak interv…