PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless malware attacks that evade detection.

Fortinet says the May 2026 Ousaban campaign uses PDF lures, geofencing, and steganography to target Windows banking users.

Fortinet says the Ousaban trojan uses geofenced phishing PDFs and steganography to steal banking credentials from users in Spain and Portugal.

If you're considering PuppeteerSharp for PDF generation, here's the version of the story that doesn't show up in the "getting started" docs.

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...

Microsoft says these 119 malicious extensions were downloaded a total of 2.6 million times since 2021.

A fileless malware framework is abusing Google’s Blogspot platform to deliver PureLog Stealer directly into computer memory, sharpening concerns that trusted web services are being turned into staging ...

PDF files are a mainstay in our multi-platform world. This convenient file format makes it possible to view and share documents across various devices, using various operating systems and software ...

Google Chrome has continued to add to its PDF functionality since the feature debuted in 2010, creating an ecosystem that ...

If you cannot download a file from the Internet or save or run it using Chrome, Edge, Firefox, Opera, or other browsers on Windows 11/10; that is, when you click a link to download a file, nothing ...

Securonix says PureLogs infection starts with a fake PDF JavaScript file and uses PowerShell, fileless .NET loading, and LOLBins.

The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm ...