The FBI has issued a FLASH alert warning that two threat clusters, tracked as UNC6040 and UNC6395, are compromising ...

But despite being documented by the security shop, ChillyHell wasn't flagged as malicious. In fact, the sample uncovered by ...

The cybercrime collective and 14 allied groups claim they’re ‘going dark’ in a dramatic farewell letter, but experts question ...

Cloudflare last week pinned the attack on a threat group it tracks as GRUB1 that aligns with UNC6395. And it's suspected that ...

The integration between Salesforce and the Salesloft platform has been restored after an investigation by Mandiant linked an ...

Salesloft has revealed that threat actors targeted customer Salesforce data after breaching its GitHub account ...

Jamf Threat Labs has released a new report on Mac malware. Dubbed ChillyHell, the malware was first discovered in 2021 and ...

While the backdoor in itself is not out of the ordinary, the fact that it remained undetected for a long time is. Apparently, ...

Security investigators from Google said UNC6395 hackers spent several months running through Salesloft and Drift systems before launching a data breach campaign that some security researchers say has ...

The cyber-threat intel-sharing and collaboration group RH-ISAC is helping companies confront cyberattacks. But the challenge ...

Jamf researchers have detailed a Mac backdoor called ChillyHell that passed Apple's notarization checks in 2021 and went ...

CHILLYHELL macOS malware, notarized since 2021, exposed May 2025 with flexible persistence and C2 evasion tactics.