McAfee Labs uncovers Marsalek malware in fake game cheats. See how the dual-hook Marsalek malware drops PureLog to steal passwords from gamers and hackers.

Related Posts:

• Anubis Ransomware Attackers Deploy Custom Lindnor Backdoor and 13 Security Killers Against US Target
• PolinRider Loader Hits 10 Hijacked npm Packages Using Ethereum Dead-Drop Resolver
• Trojanized Inno Setup Installers Deliver Proxyware and Compute Hijackers

The post Marsalek Malware Disguised as Game Cheats Uses Dual-Hook Setup to Steal Passwords and Wallets appeared first on Daily CyberSecurity.

Morphisec exposes a LuaJIT XLoader infostealer campaign. Learn how the XLoader infostealer abuses JScript and shared-section injection.

Related Posts:

• BITTER PapRAT Malware Targets South Asian Organizations
• Apple Mercenary Spyware Threat Prompts Global Alerts
• Hugging Face Malware Campaign Infects AI GPU Servers

The post LuaJIT XLoader Infostealer Spreads via Fake Orders appeared first on Daily CyberSecurity.

Cisco Talos uncovers the NIK C2 framework. This Windows NIK C2 framework abuses OpenAI APIs to analyze stolen victim data and deploy screen lockers.

Related Posts:

• Rust Doorway Botnet Exploits Routers, Cameras, and Servers
• Synology NAS Ransomware Targets Unpatched Devices
• Malicious Claude Code Extension Injects SSH Backdoor in Cursor Marketplace

The post NIK C2 Framework Integrates OpenAI API to Analyze Stolen Data in Live Attacks appeared first on Daily CyberSecurity.

Zscaler uncovers an SEO poisoning campaign using fake Chocolatey and Massgrave sites to drop Armorsteal malware and Python Armorsteal malware modules.

Related Posts:

• SiriusQT RAT Combines Hidden Desktop Control With Credential and Wallet Theft
• uCreator Android Spyware Hooks Telegram and WeChat Inside Virtual Containers
• Amazon ClickFix Campaign Abuses Windows Finger Command to Drop Lumma Stealer and NetSupport

The post Fake Chocolatey and Massgrave Sites Deliver Python Armorsteal Malware via SEO Poisoning appeared first on Daily CyberSecurity.

Symantec reveals the Aoki infostealer. The Aokigahara Aoki infostealer steals API keys and session files from Claude, Codex, Cursor, and Gemini.

Related Posts:

• 333 Tor Exit Nodes Hijacked by Ebury Malware for SSH Attacks
• CL-UNK-1211 Deploys SysGoRAT Malware and AI Scripts Against Government Linux Servers
• Qilin, Inc and Settra Ransomware Gangs Exploit PAN-OS Flaw CVE-2026-0257 for VPN Access

The post Aoki Infostealer Harvests API Keys and Tokens From AI Coding Assistants appeared first on Daily CyberSecurity.

A fake Web3 accelerator used malicious npm packages to drop stealers on macOS and Windows and reroute AI coding agent traffic to its servers.

Related Posts:

• Ledger Supply Chain Attack Hits Europe via Tampered Wallets
• AI Agent Attack Turns One Exposed Endpoint Into a Full Server Takeover in Under 24 Hours
• Warden Stealer Rust Infostealer Targets AI Coding Agent Tokens and Browser Data

The post Malicious npm Packages From Fake Web3 Accelerator Apex Deliver Stealers and Hijack AI Coding Agents appeared first on Daily CyberSecurity.

Warden Stealer, a fast-growing Rust infostealer, steals AI agent tokens, browser data, and crypto while bundling its own loader and clipper.

Related Posts:

• 16 Fake Rabby and OKX Firefox Extensions Stole Crypto Wallet Recovery Phrases
• The Silent Threat of Midnight Mimosa Malware
• Phishing Campaign Abuses Microsoft Power BI to Install Rogue ScreenConnect Clients

The post Warden Stealer Rust Infostealer Targets AI Coding Agent Tokens and Browser Data appeared first on Daily CyberSecurity.

Trump Mobile data breach: BYOD leaks Trump Mobile customer data for 3,615 people, including Trump allies, via an infostealer and no MFA.

Related Posts:

• Denmark CPR Data Breach Exposes CPR Numbers of 8.8 Million People
• AI Coding Agents Leak 13,000 Internal Screenshots to Public GitHub Repos
• Meta Muse Secretly Used Humans for AI Phone Calls

The post Trump Mobile Data Breach Exposes 3,615 Customers in BYOD Leak appeared first on Daily CyberSecurity.

2CLoader malware dodges sandboxes and security tools to deliver Vidar and Remus infostealers. See how it works and how to detect it.

Related Posts:

• Moroccan Intelligence Deploys Vast Surveillance Panopticon
• DragonForce Backdoor Adds MQTT Fallback to Microsoft Teams TURN Command Channel
• BPFDoor Backdoor and New AVERAT Implant Hide in SMTP Traffic on Telecom Edge Devices

The post New 2CLoader Malware Delivers Vidar and Remus Infostealers While Dodging Sandboxes appeared first on Daily CyberSecurity.

A new MacSync macOS infostealer spreads via fake apps. Learn how the MacSync macOS infostealer abuses iCloud to compromise Apple systems.

Related Posts:

• SectopRAT Malware Variant Hidden in Legitimate Software
• Android Toll Fraud Malware Found on Google Play
• PamStealer macOS Malware Spreads via Fake Wavel Crypto App

The post New MacSync macOS Infostealer Targets Crypto Wallets appeared first on Daily CyberSecurity.

A new PamStealer macOS infostealer spreads via fake Wavel apps. Learn how the PamStealer macOS infostealer steals system passwords and browser data.

Related Posts:

• RemControl Android Banking Trojan Steals Bank PINs
• Malicious Terraform Providers Spread Graphalgo Go Malware
• CLOSEDQUORUM AI Malware Uses LLMs for Autonomous C2

The post PamStealer macOS Malware Spreads via Fake Wavel Crypto App appeared first on Daily CyberSecurity.