Thousands of real websites are hijacked by cybercriminals using DNS to invisibly redirect and infect victims.

A newly discovered toolkit called DKnife has been used since 2019 to hijack traffic at the edge-device level and deliver ...

Compromised dYdX npm and PyPI packages delivered wallet-stealing malware and a RAT via poisoned updates in a software supply chain attack.

China-linked DKnife framework uses router-level AitM implants for traffic hijacking, credential theft, and malware delivery targeting edge devices.

The DKnife gateway-monitoring and AitM framework is targeting Chinese users’ desktop, mobile, and IoT devices with backdoors.