Malware

Widely used VMware environment reporting utility RVTools had its website compromised to facilitate the distribution of a trojanized installer that spreads the Bumblebee malware, reports The Hacker News.

Intrusions involved the distribution of KeeLoader through the still operational keeppaswrd[.]com website.

Malicious payloads embedded in Procolored printers Digital printing solutions provider Procolored has offered printers with software drivers compromised with the XRed remote access trojan and the SnipVex clipbanker tool, reports GBHackers News.

Hackread reports that Russian developers have been targeted by a suspected pro-Ukraine hacktivist operation with the debugging tool-spoofing Python Package Index repository package "dbgpkg" that facilitates malicious code execution and information exfiltration.

More ransomware gangs, including Black Basta and Cactus, have been leveraging the new Skitnet malware, also known as Bossnet, for covert post-exploitation operations since earlier this year, reports BleepingComputer.

Newly emergent malware loader TransferLoader features several components that facilitate arbitrary command execution on targeted systems, with the loader having been leveraged to distribute the Morpheus ransomware in an attack against a U.S. law firm, reports GBHackers News.

Hackread reports organizations across various sectors, especially retail and hospitality, have been increasingly targeted by the FrigidStealer macOS malware, which has been spread via fraudulent browser updates to compromise sensitive information.

Updated Remcos RAT deployed in fileless intrusion Threat actors have leveraged a new fileless attack technique involving a PowerShell-based loader to covertly compromise targeted systems with an updated iteration of the Remcos RAT malware, according to Infosecurity Magazine.