The Gootloader malware, typically used for initial access, is now using a malformed ZIP archive designed to evade detection ...

GootLoader malware is abusing malformed ZIP archives that bypass common tools like WinRAR & deliver JavaScript payloads via ...

A new WhatsApp Web attack spreads self-propagating ZIP files containing Astaroth banking malware through trusted ...

Unlike traditional shell replacements like Cairo Shell or Open-Shell that are built with native Windows APIs and compiled C++ ...

CERT-UA reports PLUGGYAPE malware attacks targeting Ukrainian defense forces via Signal and WhatsApp, using phishing links ...