Malware

New MucorAgent malware leveraged in Eastern Europe-targeted campaign Hackread reports that attacks with the novel MucorAgent backdoor have been deployed by Russia-linked threat operation Curly COMrades against Eastern European countries as part of a new cyberespionage campaign, including Georgia and Moldova.

The group sent emails from purported job seekers with a malicious archive attached.

GBHackers News reports that the newly emergent CastleBot malware-as-a-service framework, which has ramped up activity since May, has enabled the distribution of a plethora of malicious payloads, including information-stealing malware and other ransomware-linked backdoors.

Bogus Firefox crypto wallet extensions pilfer more than $1M More than $1 million worth of cryptocurrency has been exfiltrated via over 150 counterfeit crypto wallet extensions on the Mozilla Firefox marketplace as part of the sweeping GreedyBear cybercrime campaign, Hackread reports.

Experts call the takedown a win for defenders, but effective prosecutions must follow.

The malware brute forces WordPress sites to upload and spread the trojan.

The group behind the attack uses malicious browser extensions, malware, and fake websites.