Sunday, November 15, 2026
Latest:

QUE.com

Artificial Intelligence Machine Learning CyberSecurity Robotics Blockchain

Malware

Illustration of sealed software packages on a conveyor belt, one cracked open to reveal a hidden malicious drone, symbolizing a trojanized software release
Cyber Attack CyberSecurity Malware 

Hackers Used Ethersphere’s Own Release Robot to Ship a Signed, Apple-Notarized Wallet Stealer, Proving a Valid Provenance Badge Isn’t a Security Check

Coron @QUE.COM 163 Views 0 Comments , , , , , ,

Attackers with stolen CI credentials used Ethersphere’s own automation to publish a malicious bee-js npm package with valid provenance and a signed, Apple-notarized Swarm Desktop update that stole node wallet keys and planted backdoors. Here’s what happened and what every software buyer and builder should change.

Read more
Gaming PC in a dark room with red digital tendrils creeping from the screen toward a keyboard and crypto wallet, illustrating a game launcher stealing credentials
Cyber Attack CyberSecurity Malware 

Hackers Turned the NIKKE Game Launcher Into a Password and Crypto Wallet Stealer Without Touching a Single Game File

Coron @QUE.COM 178 Views 0 Comments , , , , , ,

Bitdefender found attackers using the signed NIKKE game launcher’s own task channel to run k2f-agent, a 46-module stealer hidden in a log file that grabs browser passwords, crypto wallets and developer secrets, then sends them out through the launcher’s telemetry. Here is why ‘trusted’ software is the new attack path for businesses.

Read more