Troy Hunt: Weekly Update 483
Building out an IoT environment is a little like the old Maslow's...
I am not a robot: ClickFix used to deploy StealC and Qilin
ClickFix is an increasingly common tactic used by threat actors to install malicious software on victims’ devices. It has gone through a number of...
Iranian Infy APT Resurfaces with New Malware Activity After Years of Silence
î ‚Dec 21, 2025î „Ravie LakshmananMalware / Cyber Espionage
Threat hunters have discerned new activity associated with an Iranian threat actor known as Infy (aka Prince of...
I am not a robot: ClickFix used to deploy StealC and Qilin
ClickFix is an increasingly common tactic used by threat actors to install malicious software on victims’ devices. It has gone through a number of...
A new campaign by the ForumTroll APT group
Introduction
In March 2025, we discovered Operation ForumTroll, a series of sophisticated cyberattacks exploiting the CVE-2025-2783 vulnerability in Google Chrome. We previously detailed the malicious...
Maybe a Little Bit More Interesting React2Shell Exploit
I have already talked about various React2Shell exploit attempts we have observed in the last weeks. But new varieties of the exploit are popping...
