Malware

The malware has evolved with new features and spread globally in the past three months.

Information-stealing malware Acreed has emerged as the most pervasive stealer payload on the widely known dark web credential trading platform Russian Market this year, ahead of the RedLine, Raccoon, StealC, and Vidar strains, reports Infosecurity Magazine.

Artificial intelligence-generated malware has been launched against Windows and Linux systems through the exploitation of the popular self-hosted AI interface Open WebUI, according to SiliconANGLE.

Hackread reports that Windows and Linux systems have been targeted for compromise by a pair of backdoored Python Package Index packages, with the first masquerading as the widely used Python tool colorama and the other spoofing a similar package on NPM colorizr, as part of a new attack campaign.

Almost 10% of the infected IP addresses were in the U.S., which accounted for most of the impacted devices, followed by Germany, France, the UK, and Brazil, a report from the Shadowserver Foundation showed.

EDDIESTEALER uses obfuscated Rust code and dynamic C2 tasking to evade and adapt.

Malicious job offers from fashion and beauty brands Bershka, John Hardy, Fragrance Du Bois, and Dear Klairs have been used to deploy the PureHVNC remote access trojan as part of a multi-stage phishing campaign last year, GBHackers News reports.