Microsoft details a new ClickFix variant abusing DNS nslookup commands to stage malware, enabling stealthy payload delivery and RAT deployment.

Microsoft releases KB5077178, KB5077180, and KB5077374 with WinRE upgrades, Secure Boot updates, and Dynamic Setup improvements.

APT28’s Operation MacroMaze used macro-laced documents and webhook.site to exfiltrate data across Europe from Sept 2025 to Jan 2026.

Threat actors are now abusing DNS queries as part of ClickFix social engineering attacks to deliver malware, making this the first known use of DNS as a channel in these campaigns.

Browse each directory to read more about each interaction method. Beginners are recommended to start with jupyter_notebook since its interactive nature allows for step-by-step code execution, ...

Abstract: Malware attacks are amongst the most common security threats. Not only malware incidents are rapidly increasing, but also the attack methodologies are getting more complicated. Moreover ...

State hackers from four nations exploited Google's Gemini AI for cyberattacks, automating tasks from phishing to malware development..

On October 2023 Microsoft deprecated VBScript. A timeline is available at the Windows IT Pro Blog. However, there are still many legacy systems that use VBScript. This project aims to provide a lexer, ...