New backdoors from Toy Ghouls
Introduction We continue tracking the activity of Toy Ghouls (also known as Bearlyfy, Laboo.boo, and Feral Wolf), a financially motivated
Introduction We continue tracking the activity of Toy Ghouls (also known as Bearlyfy, Laboo.boo, and Feral Wolf), a financially motivated
In this article Microsoft Defender Experts is tracking an active malware campaign that uses counterfeit software-download websites to impersonate trusted
All threats In Q2 2026, the percentage of ICS computers on which malicious objects were blocked continued to decrease, falling
In this article AI is creating a new layer of enterprise infrastructure. Gateways, retrieval platforms, orchestration services, and containerized runtimes
While monitoring Android threats in June 2026, we discovered a new piece of Android malware. What struck us as unusual
In May 2026, we discovered a new cyber-espionage campaign by the Armored Likho group, also known as Eagle Werewolf, that
In this article Since early May 2026, Microsoft Threat Intelligence has observed Storm-2945, a sub-cluster of Midnight Blizzard, conducting widespread
Introduction Mirage Kitten – also known as UNC1549, Smoke Sandstorm, and Nimbus Manticore – is an advanced persistent threat (APT) group focused
Christopher Nolan’s The Odyssey had barely reached theaters before scammers began targeting people searching for pirated copies, according to Malwarebytes.
Introduction In February 2026 we discovered a set of malicious activities that have been ongoing since late 2025. These activities