🚨 Watch out as the new #PS1Bot malware steals crypto wallets, passwords, and sensitive data, spreading through #malvertising while evading detection.
Read: https://hackread.com/malvertising-attack-crypto-stealing-ps1bot-malware/
🚨 Watch out as the new #PS1Bot malware steals crypto wallets, passwords, and sensitive data, spreading through #malvertising while evading detection.
Read: https://hackread.com/malvertising-attack-crypto-stealing-ps1bot-malware/
Excited to announce that we just published our research into "PS1Bot" a multi-stage PowerShell-based modular malware framework being delivered via malvertising campaigns that we've been tracking throughout 2025. Check it out!
https://blog.talosintelligence.com/ps1bot-malvertising-campaign/
You Wouldn’t Download A Skateboard?
https://hackaday.com/2025/05/30/you-wouldnt-download-a-skateboard/
Excited to announce that Asheer Malhotra, Ashley Shen, Vitor Ventura and I just published a new blog on how initial access groups are changing and propose a new taxonomy to support the latest threats that we are seeing. Check it out!
https://blog.talosintelligence.com/redefining-initial-access-brokers/
In addition, we have also published a blog proposing an extension to the Diamond Model to support more accurate and comprehensive threat modeling support for compartmentalized intrusion sets. Check it out too!
https://blog.talosintelligence.com/compartmentalized-threat-modeling/
A new spam campaign is targeting Brazilian users with a clever twist — abusing the free trial period of trusted remote monitoring tools and the country’s electronic invoice system to spread malicious agents.
The Cyber Threat Alliance (CTA) is a group of cybersecurity practitioners from organizations that have chosen to work together in good faith to share threat information for the purpose of improving defenses against advanced cyber adversaries across member organizations and their customers.