Netcrook
04 يوليو 2026
108 Poisoned Builds, One Shared Trap: The New Cross-Ecosystem Supply-Chain Wave
A campaign tied to PolinRider has put malicious packages and browser extensions into npm, Packagist, Go, and Google Chrome, showing how one delivery pattern can travel across very different trust systems.
BusySnake Turns One Windows Intrusion Into a Multi-Secret Heist
A Python-based infostealer is being tracked as a focused grab for browser logins, Telegram sessions, screenshots, clipboard data, and crypto material - a reminder that one endpoint can hold many forms of usable trust.
Legal Decoys, Fileless Tradecraft: The Avalon Chain Raises the Bar for Malware Defenders
A newly observed malware framework uses a spoofed legal-document lure and a staged, fileless-oriented chain to hand off to CrownX ransomware capabilities.
Trusted Updaters, Silent Load: How a Stealer Campaign Hid in Plain Sight
A phishing chain built around familiar Windows update tools shows how attackers can turn routine maintenance paths into covert launch points for credential theft.
Inside the Lure Box: How an ISO Package Turns Backup Protection into the Real Target
A reported ransomware framework uses a disk image and a trust-building file name to push the attack past mailbox filters and toward the systems defenders rely on for recovery.
Inside the TimbreStealer Trail: A Windows Loader Game Built to Slip Past the Guardrails
A TimbreStealer campaign tied to Mexican companies points to a familiar but stubbornly effective pattern: localized lure material, DLL side-loading, and anti-analysis engineering designed to slow defenders down.
When a Blue Check Becomes a Trap Door for Mac Users
A ClickFix-style campaign on X used trust and urgency to push macOS users toward a Terminal command that delivered malware.