Fake Windows update pushes malware in new ClickFix attack

The ClickFix campaign disguises malware as legitimate Windows updates, using steganography to hide shellcode in PNG files and bypass security detection systems.
CRN

Apple Silently Updates Mac OS With Malware Protection

Researchers at Sophos Labs, which first detected Apple's silent upgrade, said that Apple updated its XProtect.plist, a file that contains basic signatures for various Mac threats, specifically to ...
Threat Post

Lazarus APT Uses Windows Update to Spew Malware

The group once again dangled fake job opportunities at engineers in a spear-phishing campaign that used Windows Update as a living-off-the-land technique and GitHub as a C2. Lazarus Group is using ...
MUO on MSN

This New Fake Update Malware Shows Macs Aren't Impervious to Attack

It might come as a surprise to some Mac fans, but cybercriminals are still actively finding ways to attack macOS. A new ...
New York Post

Apple users warned about fake update that steals money, passwords

It’s like a cybernetic catfishing scheme. Just when you thought it was safe to back on the laptop, tech-heads have revealed a fake browser update that infects Apple computers with a type of malware ...

These fake macOS updates are actually just looking to spread malware

Researchers from Proofpoint observE two groups engaging in "fake update" attacks The groups have their separate assignments ...
Homeland Security Today

CISA and Partners Release Update to Malware Analysis Report

National Security Agency, and Canadian Centre for Cyber Security have released an update to the Malware Analysis Report ...
PC World

Did Apple Update Mac’s Malware Protection–But Not Tell Anyone?

Perhaps Microsoft isn’t alone in issuing some security patches on the down-low. A new report from security software maker Sophos claims that Apple this week silently updated anti-malware protection in ...
InfoWorld

Hackers update malware tool kit with zero-day code

A new version of the IcePack hacker exploit tool kit has been released, security researchers warned Tuesday, and for the first time it includes attack code designed to exploit an unpatched, or ...