Topic: cryptocurrency mining
-
Dangerous VSCode Extensions Steal Crypto on OpenVSX
Malicious extensions in the VSCode ecosystem, such as C++ Playground and HTTP Format, have been downloaded thousands of times and are designed to steal cryptocurrency or create backdoors, with the threat actor TigerJack repeatedly uploading them under new names to evade detection. These extension...
Read More » -
Interpol Seizes $97M in Major African Cybercrime Bust
A major international law enforcement effort has resulted in the seizure of nearly $100 million and the arrest of more than 1,200 suspects across Africa in one of the largest cybercrime crackdowns in recent history. The operation, known as Operation Serengeti 2.0, united authorities from ...
Read More » -
Koske Linux malware hides in panda images to evade detection
A sophisticated Linux malware called Koske uses deceptive panda images to deliver malicious payloads, evading traditional detection and potentially leveraging AI for development. The malware employs polyglot files that function as both harmless images and executable scripts, exploiting misconfigu...
Read More » -
Fake Windows BSOD Screens Deliver ClickFix Malware
A sophisticated phishing campaign targets the European hospitality industry by impersonating Booking.com, using a fake website and a fabricated Windows Blue Screen of Death error to trick users into manually installing malware. The attack deploys the DCRAT remote access trojan, which gains persis...
Read More » -
RondoDox Botnet Breaches Next.js Servers via React2Shell Flaw
The RondoDox botnet is actively exploiting the critical React2Shell vulnerability (CVE-2025-55182) to compromise Next.js servers, deploying malware and cryptocurrency miners. This campaign is part of the botnet's evolving, aggressive strategy, which also includes large-scale exploitation of vulne...
Read More » -
React2Shell flaw fuels ransomware attacks
The **React2Shell** vulnerability (CVE-2025-55182) is being actively exploited, allowing attackers to gain unauthorized server access and deploy ransomware in under a minute without authentication. Attackers used this flaw to deploy the **Weaxor ransomware**, a less sophisticated rebrand of older...
Read More » -
Runpod Hits $120M ARR, Sparked by a Reddit Post
Runpod, an AI application hosting platform, reached a $120 million annual revenue run rate by solving a frustrating software experience for developers working with GPUs, starting from a simple Reddit post and bootstrapping. The founders, former corporate developers, pivoted their cryptocurrency m...
Read More »