Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.

Paul Kiernan is an economics reporter for The Wall Street Journal in Los Angeles. He writes about California's economy, immigration, labor and housing. Before moving to the West Coast in 2025, Paul ...