Research reports
1,224 reports from 387 publishers45 added in the past week
4 reports, newest added first
Added Thu 8 Oct
$100k in Crypto Drained by the Underground Operation
Netskope Threat Labs analyzed a crypto-stealing operation that drains victims’ cryptocurrency exchange accounts. An Aotera/Tedy loader injects a Vidar-class stealer into a Windows process, which then launches Chrome or Edge and injects its scripts into the…
MalwareInfostealers
Added Wed 20 May
OpenClaw’s Hologram: Fake Installer Ships Rust Infostealer
Netskope Threat Labs has found a fake OpenClaw installer delivering red-team-grade capabilities—all pointed at stealing credentials from over 250 crypto wallet and password manager extensions. The dropper’s manifest doesn’t hide the intent: “Hologram – Decoy…
MalwareInfostealers
Added Wed 29 Apr
Shai-Hulud 2.0: Aggressive, Automated, and Fast Spreading
In mid-September 2025, security researchers first identified a supply-chain compromise in the npm ecosystem, the original Shai-Hulud campaign. The first known compromised package was @ctrl/tinycolor version 4.1.1. Only two months later, a far more aggressive…
Supply chain
Added Mon 6 Apr
New Phishing Attacks Exploiting OAuth Authorization Flows (Part 1)
This blog series expands upon a presentation given at DEF CON 29 on August 7, 2021. Phishing attacks are starting to evolve from the old-school faking of login pages that harvest passwords to attacks that abuse widely-used identity systems such as Microsoft…
VulnerabilitiesPhishing
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.