Malware

More than 4,000 IP addresses worldwide have been compromised by Vietnamese threat actors in attack campaigns involving the Python-based PXA Stealer malware, resulting in the theft of over 200,000 credentials, more than 4 million browser cookies, and hundreds of credit card records, The Hacker News reports.

Threat actors have been targeting Linux systems with the novel Plague backdoor that conceals itself as a nefarious Pluggable Authentication Module and enables both authentication bypass and persistent SSH access, Security Affairs reports.

Hackread reports that malicious actors have begun using malicious Windows shortcut files to distribute the Remcos RAT malware as part of a new attack campaign.

Threat actors have launched a deluge of cyberattacks during the first six months of 2025, resulting in record-high credential theft, ransomware, and data breach incidence, Cybernews reports.

Malware and cyber forensic analysts across the public and private sectors have been given access to the Cybersecurity and Infrastructure Security Agency's open-source scalable cybersecurity suite Thorium, according to BleepingComputer.

Android users across Europe have been targeted with attacks involving a more sophisticated iteration of the DoubleTrouble banking trojan, Infosecurity Magazine reports.

Threat actors have been leveraging link wrapping services for clandestine malware delivery as part of a new phishing campaign aimed at credential exfiltration, reports The Hacker News.

Multiple local internet service providers across Russia have been targeted by Russian state-backed advanced persistent threat operation Secret Blizzard, also known as Turla, to compromise foreign embassies in Moscow with the ApolloShadow malware as part of a cyberespionage campaign that has been underway since last year, according to The Record, a news site by cybersecurity firm Recorded Future.