Malware

Updated attack arsenal leveraged in MirrorFace attacks against Japan, Taiwan Attacks with the ROAMINGHOUSE malware and an updated ANEL backdoor have been launched by Chinese hacking operation MirrorFace, also known as Earth Kasha, against Japanese and Taiwanese government agencies and public entities as part of a new cyberespionage campaign, according to The Hacker News.

Increase in attacks using malware known as “TheMoon" seen, says FBI.

North Korean groups give away their intentions with common blunders and activity patterns.

Attacks with the updated Inferno Drainer involved the exploitation of Discord to facilitate redirection to phishing sites.

COLDRIVER begins intrusions by displaying a website with a bogus CAPTCHA meant to lure targets into downloading a PowerShell script.

Discord bot developers have been targeted with the new malicious utility-spoofing Python Package Index repository "discordpydebug."

Nearly 2,800 websites, including a Brazilian news site, have been infected with the Atomic macOS Stealer.