KREMLIN targets Brazilian bank users with malicious Chrome and Edge extensions that steal credentials, session tokens, ...
AdBlock blocks known crypto miners by default, but c/side found 3,500+ sites running stealth WebSocket miners in 2025. What each extension still misses.
UTA0560 exploited a Chrome-Windows zero-day chain against NGOs to deploy GRIMWEDGE; APT31 used the same chain to install LONGTALE.
BlueMoon exploit kit, shared by four China-linked spy groups in 12 days, chains Chrome and Windows zero-days to hand ...
Four espionage groups used the BlueMoon Chrome+Windows exploit kit within 12 days. Researchers suspect AI development.
A fake Twitch viewing extension exposed OAuth tokens through proxies, risking account takeovers for nearly 31,000 users.
Thousands of hacked sites use fake CAPTCHA prompts to trick visitors into running malware. Learn the warning signs before ...