Threat Advisories:

VMware Aria and Tools Vulnerabilities Fixed Amid Ongoing Exploitation DarkCloud Rising: Spear-Phishing Campaign Targets Manufacturing Sector Active Zero-Day Exploitation on Cisco ASA and FTD Devices BRICKSTORM Malware Quietly Builds the Perfect Hideout in US Networks September 2025 Linux Patch Roundup COLDRIVER’s ClickFix Campaign Targets Civil Voices Critical Cisco SNMP Flaw Exploited: Root Access at Risk DeerStealer the $200 Doorway to Your Digital Secrets Operation Rewrite: How BadIIS Rewired the Web for SEO Poisoning Atomic Stealer Targeting Mac Users via Malicious GitHub Page Subtle Snail’s Silent Espionage Across Europe Gamaredon Tools Revive Turla’s Kazuar Backdoor to Target Ukraine Google Races to Patch Chrome’s Sixth Zero-Day CVE-2025-10585 SilentSync RAT Hides in Plain Sight on PyPI Shai-Hulud: Massive npm Supply Chain Attack Infects Hundreds of Packages From Bookings to Breaches: RevengeHotels Latest Attacks on Hospitality BlackNevas Ransomware: A Rising Global Cyber Threat Yurei Ransomware Haunts the Digital World Like a Restless Spirit Click, Paste, Compromise: Inside the New FileFix Campaign Hive0154 Evolves with SnakeDisk and EnhancedToneshell Backdoor

Hive Force Labs: October First Threat Research

Play Count: Loading...

Partner Program

Book a Demo Threat Digest - Subscribe

Unmasking OtterCookie Malware in the Contagious Interview Campaign

Amber | Attack Report

A new malware named OtterCookie used in the Contagious Interview attack campaign, which is linked to North Korea. OtterCookie primarily targets financial gains and employs sophisticated techniques like downloading JavaScript code remotely and executing commands via Socket.IO. It can steal sensitive information, including cryptocurrency wallet keys, and clipboard data. Observations suggest it has evolved since September 2024, adding features for remote command execution and data theft, posing a significant threat to financial security.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox