Malware

CyberScoop reports that open-source remote access trojan AsyncRAT, which touts credential theft, screen capturing, and keylogging capabilities, has been observed to have over 30 different variants and forks since its release in 2019.

Southeast Asia targeted by new state-sponsored HazyBeacon malware Attacks with the novel HazyBeacon Windows backdoor have been launched by state-sponsored threat cluster CL-STA-1020 against government agencies across Southeast Asia as the region has been increasingly targeted in cyberespionage operations, according to The Hacker News.

Packages that load BeaverTail malware were downloaded more than 17,000 times.

GBHackers News reports that enterprise environments could be infected with malware without any user interaction as part of the new multi-stage RenderShock attack, which involves the abuse of automated file previewing and processing features.

Malicious actors have utilized a trojanized version of the crossplatform SSH client and servermanagement tool Termius to deliver an updated iteration of the ZuRu macOS malware, according to The Hacker News.

More than 2.3 million Google Chrome and Microsoft Edge users had their browsers hijacked as part of the RedDirection attack campaign involving 18 nefarious extensions, according to The Register.

Unique malware detections during the first three months of 2025 were 171% higher than the last three months of 2024, signifying the largest jump in novel payloads yet, according to Channel Futures.