Vidar

Darktrace investigated a July 2026 intrusion in which a user at an EMEA customer downloaded a fake Google Gemini installer that delivered the Vidar information stealer. The lure used a Google Colab pa…

Darktrace researchers reported that a fake Google Gemini installer delivered the Vidar infostealer on a company network in the EMEA region, with the malicious file hosted on Google Colab. The attack l…

Cybersecurity researchers identified a malicious npm package named "mouse5212-super-formatter" designed to upload files from the "/mnt/user-data" directory used by Anthropic's Claude AI assistant. SOC…