Malware

Bogus Firefox crypto wallet extensions pilfer more than $1M More than $1 million worth of cryptocurrency has been exfiltrated via over 150 counterfeit crypto wallet extensions on the Mozilla Firefox marketplace as part of the sweeping GreedyBear cybercrime campaign, Hackread reports.

Experts call the takedown a win for defenders, but effective prosecutions must follow.

The malware brute forces WordPress sites to upload and spread the trojan.

The group behind the attack uses malicious browser extensions, malware, and fake websites.

The attack chain begins with phishing emails containing TAR, RAR or 7Z attachments.

TDS services tapped by SocGholish malware operators Intrusions involving the SocGholish malware, also known as FakeUpdates, have been facilitated by the TA569 threat operation, also known as Mustard Tempest, Gold Prelude, Purple Vallhund, and UNC1543, through traffic distribution systems Parrot TDS and Keitaro TDS, according to The Hacker News.

Hacking operation ChinopuNK, a subgroup of the North Korean state-backed advanced persistent threat gang ScarCruft, has been deploying various payloads as part of a new global malware campaign, GBHackers News reports.

Dangerous AI-powered malware is still a way off, experts say, but certain AI protocols are full of security holes.