/
victim_sectors:media × latest_source_host:welivesecurity.com × limpar

Resultados

2 casos · pág. 1/1

welivesecurity.com · medium

Brand deal scam impersonating Hollyland, Nike and Spotify hijacks YouTube creators' Google accounts

A modular phishing campaign targets YouTube creators with personalized sponsorship offers from fake brand representatives. One variant impersonates Hollyland, a maker of wireless video transmission equipment, and also Nike and Spotify. Victims are led through a convincing fake collaboration platform to a bogus "Sign in with Google" page t…

welivesecurity.com · high

UAC-0099 evolves MATCHBOIL C# downloader targeting Ukrainian transport, manufacturing and energy firms

ESET documented the evolution of MATCHBOIL, a custom C downloader used by the Russia-aligned cyberespionage group UAC-0099. Samples span April 2024 to April 2026, although CERT-UA first documented the malware in August 2025. Each iteration became more sophisticated, with new obfuscation, sandbox checks and persistence methods. All victims…