Malware

The malware, disguised as a "privacy browser," was distributed via a deceptive sponsored search result after an employee mistyped a URL.

A Russian national has been charged by the U.S. Department of Justice for allegedly operating approximately 255 fake accounts on a freelance platform to distribute malware-laced Excel attachments to around 80,000 users in 2016 and 2017.

The malicious code performs two main functions: a mobile ad-fraud and gambling-redirect chain, and a WebKit-to-kernel exploit chain on iPhones that installs spyware.

The PackClient RAT, observed by Proofpoint, offers a wide range of capabilities including file theft, remote shell execution, screen capture, and keylogging.

Infostealer malware, including families such as Vidar, LummaC2, StealC, RedLine, and Acreed on Windows, and Atomic Stealer on macOS, is stealing active Claude session cookies from infected computers.

The Windows infostealer uses several evasion measures to remain mostly invisible to security systems.