DomainTools
-
CountLoader: New Russian-linked malware loader broadens post-exploitation toolkit, researchers warn
Cybersecurity researchers have identified CountLoader, a new malware loader used by Russian ransomware groups to deliver post-exploitation tools such as Cobalt Strike, AdaptixC2, and the PureHVNC RAT. The loader, observed in variants across .NET, PowerShell, and JavaScript, targets Ukrainian users with PDF phishing lures and features a BrowserVenom proxy capability, multiple download/execution methods, and a…
-
Over 100 Malicious Chrome Extensions Discovered Posing as Legitimate Tools
Over 100 malicious Chrome browser extensions were found masquerading as legitimate tools, enabling credential theft and unauthorized access to user data. Experts warn users to remain vigilant when downloading browser extensions.