#world cup#football#fifa#soccer#fifa world cup#world cup 2026#england nt
seen from China
seen from United Kingdom
seen from United States
seen from Malaysia
seen from Germany
seen from Malaysia
seen from United States
seen from Brazil
seen from Germany
seen from China
seen from Germany
seen from Malaysia
seen from Vietnam
seen from Russia
seen from New Zealand
seen from United States
seen from United Kingdom
seen from China
seen from Finland
seen from Vietnam
Fake Game Cheats Flood GitHub with Vidar Stealer 2.0
Hundreds of fake cheat repositories are infecting gamers with a revamped Vidar Stealer that silently exfiltrates credentials, crypto wallets, and sensitive files.
Source: Acronis Threat Research Unit
Read more: CyberSecBrief
Fake CAPTCHA Pages Deliver Banking Malware in Mexico
A banking fraud campaign is using fake CAPTCHA pages to spread SCMBANKER, a PowerShell toolkit that steals screenshots, hijacks browser sessions, and targets Mexican financial services.
Source: Elastic Security Labs
Read more: CyberSecBrief
StegaBin npm Packages Deploy Multi-Stage Malware
26 malicious npm packages used Pastebin steganography to hide command-and-control infrastructure, deploying a remote access trojan and a nine-module infostealer toolkit.
Source: Socket
Read more: CyberSecBrief
OpenClaw AI Marketplace Abused to Deploy Infostealers and Financial Fraud Skills
Malicious AI “skills” in the OpenClaw ecosystem are being used to distribute infostealers and manipulate financial workflows, showing how AI agent marketplaces are emerging as a new supply chain attack surface.
Source: Palo Alto Networks Unit 42
Read more: CyberSecBrief
SEO Poisoning Campaign Abuses AI Tool Branding to Deliver Memory-Resident Infostealer
A targeted SEO poisoning operation is impersonating popular AI development tools like Gemini CLI and Claude Code, tricking users into downloading a Windows infostealer that executes PowerShell payloads in memory to steal credentials, OAuth tokens, and CI/CD secrets.
Source: EclecticIQ
Read more: CyberSecBrief
Worm-Like npm Malware Hijacks Developer Systems
A self-propagating npm supply chain attack spreads CanisterWorm malware through compromised packages, stealing developer credentials and republishing infected versions across ecosystems. The malware extracts SSH keys, cloud credentials, and crypto wallets while exfiltrating data via encrypted channels and Internet Computer canister infrastructure. It further propagates by abusing stolen npm tokens to infect additional packages and extend cross-ecosystem compromise into PyPI.
Source: Socket
Read more: CyberSecBrief
108 Chrome Extensions Turn Browsers into Data Theft Machines
A coordinated campaign of 108 Chrome extensions silently siphoned logins, Telegram sessions, and browsing data from thousands of users using shared command infrastructure.
Source: Socket Threat Research Team
Read more: CyberSecBrief
Developers Targeted Through Poisoned VS Code Extensions
Weaponised Visual Studio Code extensions silently infected developer machines, stealing credentials, system data, and cryptocurrency at scale.
Source: Trend Micro
Read more: CyberSecBrief
