Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server.

Blackpoint Cyber found ChainScript, a Node.js RAT spread through fake Spotify, Zoom and Teams installers that uses Polygon smart contracts to locate its C2 server.

Explore the latest news, real-world incidents, expert analysis, and trends in Malware — only on The Hacker News, the leading ...

This article is a record of a reproduction experiment in which generative AI agents were tasked with extensively and autonomously executing game development for Roblox. It comprehensively records and ...

ConclusionEven if the syntax is correct, it is safer not to execute PowerShell scripts created by AI directly on production ...

Feral Wolf targets Russian firms via exposed software and weak credentials, using backdoors and GenieLocker ransomware to encrypt data.

IntroductionIn August 2026, Zscaler ThreatLabz observed new activity by the Pakistan-nexus threat actor APT36 in a campaign we’re tracking as Operation RapidRust. Since our last publication about the ...

Over 5,400 legitimate websites now serve fake CAPTCHA scams that trick users into pasting malware commands into Windows Run ...

SloppyRAT uses ClickFix to help ransomware attackers gain access, gather data, and spread across compromised networks.

Microsoft is closing out two long-running products within the same two weeks of October. Publisher, the desktop publishing ...

My "clean" Windows install wasn't clean at all.

The September 2026 Patch Tuesday update, KB5124008, is out, and it finally lets you move the Windows 11 taskbar to any edge ...