Malware
-
Hotel Wi-Fi Hijack Uses Fake Updates to Deliver Spyware
Microsoft attributes CaptiveCrunch to Storm-2945, a Midnight Blizzard sub-cluster using hotel captive portals to deploy malware and steal cloud tokens.
-
UAC-0145 Uses ClickFix CAPTCHAs to Deploy Malware in Ukraine
UAC-0145 ran ClickFix CAPTCHA lures on 10 or more compromised sites in mid-2026, tricking Ukrainian targets into running PowerShell that stages malware.
-
RubyGems Suspends Signups After Malicious Package Flood
RubyGems disabled new account registrations on May 12, 2026 after attackers bulk-uploaded hundreds of malicious gems alongside a DDoS on the registry.