Cyber Security - Capa Learning

Over 269,000 Websites Infected with JSFireTruck JavaScript Malware in One Month

Jun 13, 2025Ravie LakshmananWeb Security / Network Security Cybersecurity researchers have uncovered a widespread campaign compromising legitimate websites with malicious JavaScript injections. The injected code, obfuscated using JSFuck, hides its true purpose, hindering analysis. The campaign has infected over 269,000 …

Over 269,000 Websites Infected with JSFireTruck JavaScript Malware in One Month Read More »

Discord Invite Link Hijacking Delivers AsyncRAT and Skuld Stealer Targeting Crypto Wallets

A recent malware campaign has exploited a vulnerability in Discord’s invitation system to distribute a data stealer named Skuld and the AsyncRAT remote access trojan. According to a technical report by Check Point, attackers manipulated vanity link registrations to redirect …

Discord Invite Link Hijacking Delivers AsyncRAT and Skuld Stealer Targeting Crypto Wallets Read More »

Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon Spyware

Apple recently revealed that a security flaw in its Messages app, now patched, was exploited in cyber attacks targeting civil society members. The vulnerability, known as CVE-2025-43200, was fixed on February 10, 2025, in updates for iOS, iPadOS, macOS, watchOS, …

Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon Spyware Read More »

ConnectWise to Rotate ScreenConnect Code Signing Certificates Due to Security Risks

Jun 12, 2025Ravie LakshmananVulnerability / Software Security ConnectWise has announced plans to rotate the digital code signing certificates used to sign ScreenConnect, ConnectWise Automate, and ConnectWise remote monitoring and management (RMM) executables due to security concerns. The decision to rotate …

ConnectWise to Rotate ScreenConnect Code Signing Certificates Due to Security Risks Read More »

Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero-Day Exploited in the Wild

Microsoft has recently issued patches to address a total of 67 security vulnerabilities, with one zero-day flaw in Web Distributed Authoring and Versioning (WebDAV) being actively exploited in the wild. Out of the 67 vulnerabilities, 11 are classified as Critical …

Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero-Day Exploited in the Wild Read More »

Rare Werewolf APT Uses Legitimate Software in Attacks on Hundreds of Russian Enterprises

Jun 10, 2025Ravie LakshmananCryptocurrency / Malware The group known as Rare Werewolf, previously Rare Wolf, has been identified as the culprit behind a string of cyber attacks targeting Russia and CIS countries. Kaspersky noted that the attackers prefer using legitimate …

Rare Werewolf APT Uses Legitimate Software in Attacks on Hundreds of Russian Enterprises Read More »

OpenAI Bans ChatGPT Accounts Used by Russian, Iranian and Chinese Hacker Groups

OpenAI recently announced that it took action against a group of ChatGPT accounts believed to be operated by Russian-speaking threat actors and two Chinese nation-state hacking groups. These accounts were used for various malicious activities, including malware development, social media …

OpenAI Bans ChatGPT Accounts Used by Russian, Iranian and Chinese Hacker Groups Read More »

Malicious Browser Extensions Infect 722 Users Across Latin America Since Early 2025

Jun 08, 2025Ravie LakshmananMalware / Browser Security Cybersecurity researchers have uncovered a new campaign targeting Brazilian users in 2025 with a malicious browser extension for Chromium-based browsers to steal user authentication data. According to Positive Technologies, the attackers used a …

Malicious Browser Extensions Infect 722 Users Across Latin America Since Early 2025 Read More »

New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users

Cybersecurity experts have issued a warning about a new malware campaign using the ClickFix social engineering technique to deceive users into downloading a malicious software called Atomic macOS Stealer (AMOS) on Apple macOS devices. The campaign, as reported by CloudSEK, …

New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users Read More »

New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack

A new data-wiping malware called PathWiper has been discovered by Cisco Talos targeting a critical infrastructure entity in Ukraine. The attack was carried out using a legitimate endpoint administration framework, indicating that the attackers had access to the administrative console. …

New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack Read More »