Bill Toulas

Articles by Bill Toulas

New MacSync malware dropper evades macOS Gatekeeper checks

Crypto December 23, 2025

The latest variant of the MacSync information stealer targeting macOS systems is delivered through a digitally signed, notarized Swift application. Security researchers at Apple device management plοΏ½...

Nigeria arrests dev of Microsoft 365 'Raccoon0365' phishing platform

Crypto December 20, 2025

The Nigerian police arrested three individuals linked to targeted Microsoft 365 cyberattacks via Raccoon0365 phishing platform. The attacksΒ led to business email compromise, data breaches, and finan...

US seizes E-Note crypto exchange for laundering ransomware payments

Crypto December 19, 2025

Law enforcement has seized the servers and domains of the E-Note cryptocurrency exchange, allegedly used by cybercriminal groups to launder more than $70 million. It is believed that the funds origiοΏ½...

Amazon: Ongoing cryptomining campaign uses hacked AWS accounts

Crypto December 18, 2025

Amazon’s AWS GuardDuty security team is warning ofΒ an ongoing crypto-mining campaign that targets itsΒ Elastic Compute CloudΒ (EC2) and Elastic Container Service (ECS) using compromised credentials...

Critical React2Shell flaw exploited in ransomware attacks

Crypto December 18, 2025

A ransomware gang exploited the critical React2Shell vulnerability (CVE-2025-55182) to gain initial access to corporate networks and deployed the file-encrypting malware less than a minute later. ReοΏ½...

New SantaStealer malware steals data from browsers, crypto wallets

Crypto December 16, 2025

A new malware-as-a-service (MaaS) information stealer named SantaStealer is being advertised on Telegram and hacker forums as operating in memory to avoid file-based detection. According to securityοΏ½...

CyberVolk’s ransomware debut stumbles on cryptography weakness

Crypto December 14, 2025

The pro-Russia hacktivist group CyberVolk launched a ransomware-as-a-service (RaaS) called VolkLocker that sufferedΒ from serious implementation flaws, allowing victims to potentially decrypt files fo...

Google ads for shared ChatGPT, Grok guides push macOS infostealer malware

Crypto December 11, 2025

A new AMOS infostealer campaign is abusing Google search ads to lure users into Grok and ChatGPT conversations that appear to offer β€œhelpful” instructions but ultimately lead to installing the AMO...

New Spiderman phishing service targets dozens of European banks

Crypto December 11, 2025

A new phishing kit called Spiderman is targeting customers of numerous European banks and cryptocurrency services using pixel-perfect replicas of legitimate sites. The platform allows cybercriminalsοΏ½...

Spain arrests teen who stole 64 million personal data records

Crypto December 10, 2025

The National Police in Spain have arrested a suspected 19-year-old hacker in Barcelona, for allegedly stealing and attempting to sell 64 million records obtained from breaches at nine companies. TheοΏ½...