A ClickFix browser attack uses Google Sheets C2 to inject a crypto web skimmer into Chrome. See how Cisco Talos traced the theft.

Related Posts:

• Redis Cryptomining Botnet Hijacks 3,562 Servers for Monero
• Pegasus Spyware Hits Serbian Student Activist via Zero-Click iMessage
• Node.js Malware Attacks Target Tech and Finance Sectors

The post ClickFix Browser Attack Steals Crypto via Google Sheets appeared first on Daily CyberSecurity.

An ASUS vulnerability (CVE-2026-19397) lets a nearby attacker take over a host, while an Armoury Crate flaw leaks NTLM hashes. Update now.

Related Posts:

• September 2026 SAP Security Patch Day Fixes Critical Flaws
• Public PoC Disclosed for ZcopyReaper Linux Vulnerability (CVE-2026-43502)
• SonicWall SMA 1000 Vulnerabilities Exploited in Wild (PoC)

The post ASUS Patches Control Center Express and Armoury Crate Flaws appeared first on Daily CyberSecurity.

Researchers discovered malicious Packagist themes iOS spyware infecting unpatched iPhones. This spyware targets crypto wallets and steals device data.

Related Posts:

• Pegasus Spyware Hits Serbian Student Activist via Zero-Click iMessage
• Node.js Malware Attacks Target Tech and Finance Sectors
• Python NodeStealer Adds Keylogging and Screen Capture Spyware

The post Packagist Themes iOS Spyware Steals Crypto Wallet Seeds appeared first on Daily CyberSecurity.

The Coder registry attack hijacked Cloudflare IPs to serve malicious Terraform modules from registry.coder.com, stealing developer secrets.

Related Posts:

• Mirage Kitten Malware Targets Aviation and Fintech Sectors
• US Offers $10M for IRGC Cyber Leader
• Toy Ghouls Backdoor Uses HiveMQ and Element for C2

The post Coder Registry Attack: Hijacked Cloudflare Pool Served Malicious Terraform Modules appeared first on Daily CyberSecurity.

Expel analyzed the SynkLoader malware attack chain. Discover how SynkLoader malware uses Teams phishing and fake lock screens to steal credentials.

Related Posts:

• macOS ClickFix Malware Exploits Polygon C2
• WeedHack Malware Still Hits Minecraft Gamers via Fake Sites
• Cruciferra Malware Loader Uses ClickFix Lures to Kill EDR

The post SynkLoader Malware Deploys Multi-Language Attack Tools appeared first on Daily CyberSecurity.

Socket tracked 77 malicious Firefox extensions that steal crypto wallet secrets and credentials. See how the Offside Wallet Theft Factory works.

Related Posts:

• Grandoreiro Banking Trojan Returns With a DLL Sideloading Campaign
• Clop Deploys Custom Web Shell in PTC Windchill Extortion Attacks
• WordlistLoader Delivers Amatera Stealer Through ClearFake Campaigns

The post 77 Malicious Firefox Extensions Steal Crypto Wallet Secrets and Credentials appeared first on Daily CyberSecurity.