Cybersecurity researchers have discovered a dangerous malware scheme that uses fake PDF-to-DOCX converter websites to spread a powerful information-stealing trojan called ArechClient2. The fake sites mimic legitimate services and trick users into downloading malware disguised as file conversion tools. The campaign’s key technique includes using PowerShell commands to instigate a complex redirection and finally installing the malware. Users are warned to be diligent in using verified tools and updating security solutions to ensure safer online activities.

Hackers Actively Exploiting Critical Exchange & SharePoint Server Vulnerabilities
Microsoft has warned that cybercriminals are increasingly exploiting critical vulnerabilities in on-premises Exchange and SharePoint Servers. New techniques like NTLM relay and credential leakage enable