Cyber Attacks
WatchGuard SEO Poisoning: Fake Site Harvests VPN Logins Before Serving Legitimate Client
Attackers used a fake download page to harvest VPN login details, then delivered the legitimate client to avoid detection.
credential theft
Everything Packet Tribune has reported about credential theft: 3 stories, newest first. Part of our Malware & Ransomware coverage.
Malware & Ransomware
Infostealers Explained: How Data Theft Happens and How to Stop It
Infostealers operate silently in the background, harvesting credentials and tokens without triggering traditional antivirus alerts or requiring user interaction after initial installation.
Vulnerabilities
RClone Manager Local API Flaw Exposes Credentials to Browser Attacks
A critical vulnerability in RClone Manager allows malicious web pages to steal cloud storage credentials via an unauthenticated local service.