Skip to content
Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers… 

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

Ravie LakshmananOct 08, 2026Browser Security / Malware Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. “The extensions masquerade as… 

U.S. Offers Up to  Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

Swati KhandelwalOct 08, 2026Cybercrime / Cyber Espionage The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United… 

MonsterCloud Owner Accused of Billing Over M While Secretly Paying Ransoms to Decrypt Data

MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data

Ravie LakshmananOct 08, 2026Cybercrime / Ransomware The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by secretly paying the attackers to obtain… 

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

Ravie LakshmananOct 08, 2026Artificial Intelligence / Cloud Security The npm package known as “tensorlake,” a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop /…