Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.
The Russian state-sponsored APT28 threat group is using a custom variant of the open-source Covenant post-exploitation ...
Rapid7 researchers spot a malicious campaign aimed at harvesting credentials and digital wallets from Windows machines.