Employee Payroll Portal Email Scam

After inspecting this "Employee Payroll Portal" email, we learned that it is spam. It lures recipients into visiting a phishing site targeting email account log-in credentials by presenting it as a way to securely access their payroll information. The spam email with the subject "Access Your Payroll Information Securely" (may vary) states that the recipient can securely access their payroll data through the provided link. The message...

Glove Stealer Bypasses App-Bound Encryption

In a recent article by security firm Gen Digital, researchers detailed a new campaign delivering Glove Stealer as its primary malware payload. The new stealer was discovered as the payload has been named Glove by Gen Digital and uses ClickFix social engineering tactics to gain high privileges and install the malware. This is another instance of threat actors favoring info-stealing malware recently while relying on ClickFix or FakeCapthca tact...