Salt Typhoon is by far one of the most prolific hacking groups in recent years, breaching some of the top American phone ...

Storm-2561 spreads fake VPN installers via SEO poisoning and GitHub downloads, stealing enterprise VPN credentials with Hyrax malware.

An international law enforcement operation shut down a service called SocksEscort, which allegedly helped cybercriminals all over the world launch ransomware and DDoS attacks, as well as distribute ...

A threat actor tracked as Storm-2561 is distributing fake enterprise VPN clients from Ivanti, Cisco, and Fortinet to steal ...

Law enforcement agencies across the United States and Europe have dismantled a large cybercrime network powered by AVrecon malware. The malware infected hundreds of thousands of routers worldwide and ...

Malware is evolving to evade sandboxes by pretending to be a real human behind the keyboard. The Picus Red Report 2026 shows 80% of top attacker techniques now focus on evasion and persistence, ...

SocksEscort sold proxy services on the open web, but was actually routing traffic through compromised routers and internet-connected devices.