Skip to content
EtherHiding: How Ransomware Groups Use the Blockchain to Resist Takedowns
Just a few months ago, attackers used Ethereum to ⟶
Claude Coding Jailbreak: Latest Risks And Enterprise Impact
Most jailbreaks begin with a prompt designed to make ⟶
Bee Stealer Targets Codex And Claude, Uses AI To Profile Victims
BlackFog researchers uncover Bee Stealer, a Windows infostealer targeting Codex and Claude data with AI-powered victim profiling.
The Gentlemen: How GentleKiller Clears the Path to Encryption
The Gentlemen turns ransomware, data theft, and defense evasion into a managed service for affiliates, with cross-platform encryptors and a 90 percent revenue share.
MedusaHVNC: A Hidden Desktop That Steals Live Windows Sessions
MedusaHVNC is a newly uncovered hidden desktop malware family that gives operators access to live, logged-in browser sessions on a victim’s Windows device.
How the Kettering Health Ransomware Attack Disrupted Patient Services
Learn how the Kettering Health ransomware attack disrupted patient services, impacted healthcare operations, and caused cybersecurity issues.
Lazarus Group Cyber Attacks: What Businesses Need To Know
Learn who the Lazarus Group is, the major cyberattacks linked to it, and how your organization can defend against this nation-state threat.
Inside OnyxC2: The New Stealer Targeting 210 Apps
Discover OnyxC2, the new malware-as-a-service stealer targeting 210 apps. Learn how it evades detection, steals credentials, and enables data theft.
Venom Stealer Turns ClickFix Into a Full Exfiltration Pipeline
BlackFog analyzes Venom Stealer, a new MaaS infostealer that uses ClickFix delivery to launch an automated exfiltration pipeline covering credential theft, wallet cracking, and fund sweeping.
Steaelite RAT Enables Double Extortion Attacks from a Single Panel
Steaelite is a newly emerging RAT that unifies credential theft, data exfiltration, and ransomware in a single web panel, accelerating double extortion attacks.
ClawdBot and OpenClaw: When Local AI Becomes A Data Exfiltration Goldmine
ClawdBot stores API keys, chat histories, and user memories in plaintext files, and infostealers like RedLine, Lumma, and Vidar are already targeting it.
Installing BlackFog for macOS using Microsoft Intune
This is a guide on how to install and ⟶