Researchers Uncover NodeCordRAT Hidden in npm Bitcoin-Themed Packages

In the ever-evolving landscape of cyber threats, a new player has emerged that leverages a platform millions trust daily: Discord. NodeCordRAT is a sophisticated Remote Access Trojan (RAT) written in Node.js that uses Discord’s webhook functionality as its command and control (C2) channel. This beginner-friendly deep dive will dissect how this malware operates, maps to the MITRE ATT&CK framework, and most importantly, how you can defend against it.

Fake Booking Emails Redirect Hotel Staff to Fake BSoD Pages Delivering DCRat

In the ever-evolving landscape of cyber threats, a new, highly targeted phishing campaign has emerged, masquerading as legitimate hotel booking confirmations. This attack doesn’t just try to steal your login credentials, it’s a multi-stage breach designed to drain your wallet and compromise your identity. For cybersecurity beginners and professionals alike, understanding the mechanics of this hotel booking phishing scam is crucial for building effective defenses.