Malware

Newly emergent malware loader TransferLoader features several components that facilitate arbitrary command execution on targeted systems, with the loader having been leveraged to distribute the Morpheus ransomware in an attack against a U.S. law firm, reports GBHackers News.

Hackread reports organizations across various sectors, especially retail and hospitality, have been increasingly targeted by the FrigidStealer macOS malware, which has been spread via fraudulent browser updates to compromise sensitive information.

Updated Remcos RAT deployed in fileless intrusion Threat actors have leveraged a new fileless attack technique involving a PowerShell-based loader to covertly compromise targeted systems with an updated iteration of the Remcos RAT malware, according to Infosecurity Magazine.

The malicious package also uses Unicode steganography to evade detection.

Malicious actors have been deploying the new and advanced Chihuahua Stealer malware in intrusions initially detected by a user on the r/antivirus subreddit, Infosecurity Magazine reports.

Windows users in Argentina, Chile, Colombia, Guatemala, Mexico, and Peru have been subjected to attacks spreading the Horabot malware as part of a new phishing campaign discovered last month, according to The Hacker News.

Solana is having its developers' source code and secrets pilfered by a malicious Python Package Index repository package masquerading as a tool for the blockchain platform dubbed "solana-token", which has been installed 761 times before being removed from PyPI, according to The Hacker News.

Six percent of organizations around the world were compromised with the FakeUpdates malware, also known as SocGholish, making it the most prevalent malicious payload in April, Hackread reports.