CRITICALMalware
Global

Critical SimpleHelp Vulnerability Exploited for Malware Delivery

·Source: SecurityWeek

Updated:

Executive Summary

The threat actor is focused on collecting credentials, SSH keys, cryptocurrency wallets, and development tooling. The post Critical SimpleHelp Vulnerability Exploited for Malware Delivery appeared first on SecurityWeek .

Analysis

The threat actor is focused on collecting credentials, SSH keys, cryptocurrency wallets, and development tooling. The post Critical SimpleHelp Vulnerability Exploited for Malware Delivery appeared first on SecurityWeek .
Source Attribution

Originally published by SecurityWeek on Jun 30, 2026.

Related Threats

MEDIUMMalware

ClickFix Now Cybercriminals' Favorite Malware Delivery Technique

ReliaQuest report warns of a surge in ClickFix social engineering attacks against Windows and macOS users

Infosecurity Magazine
CRITICALMalware

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer

An unknown threat actor has been observed exploiting a recently disclosed maximum-severity security flaw in SimpleHelp to deliver two previously unreported malware families, TaskWeaver and Djinn Stealer. The intrusion involves the exploitation of CVE-2026-48558 (CVSS score: 10.0), a critical authentication bypass vulnerability impacting the OpenID Connect (OIDC) flow that an unauthenticated

CVE-2026-48558
The Hacker News
MEDIUMMalware

Hackers Leverage Blockchain to Hit Japan's Hotels Through Booking.com Phishing

A wave of phishing emails sent to Booking.com partner accommodations in Japan in May led to blockchain-hosted malware

Infosecurity Magazine