Malware

Suspected Russian threat actors have exploited the ClickFix attack technique to distribute the Atomic macOS Stealer, or AMOS, malware on macOS systems, according to The Hacker News.

Attacks with the nascent PathWiper malware have been deployed by a Russian advanced persistent threat operation against Ukrainian critical infrastructure organizations, The Register reports.

The malicious packages create backdoor endpoints and act as wipers when activated.

GBHackers News reports that updates to the ViperSoftX information-stealing malware have bolstered its modularity, covertness, and persistence.

BleepingComputer reports that more than 1 million internet-exposed home devices, most of which are manufactured in China, were noted by the FBI to have been compromised by the BADBOX 2.0 malware campaign.

SecurityWeek reports that the industrial sector has been primarily infected with the Win32.Worm.Ramnit, Trojan.scar/shyape, Trojan.lokibot/stealer, and Win32.Worm.Sohanad malware between October 2024 and March 2025.

GBHackers News reports that about 1.5 million devices around the world have been compromised with malicious "sleeper agent" browser extensions, which impersonate in-browser sound management tools.