Malware

WatchGuard Technologies latest Internet Security Report reveals a sharp rise in network-based malware detections, surging 94% in the final quarter of 2024, signaling increasingly aggressive and evasive cyber threats, Beta News reports.

Healthcare and pharmaceutical organizations around the world have been subjected to an attack campaign involving the new and advanced ResolverRAT malware, the most recent of which was observed in early March, reports The Hacker News.

Russian government, energy, telecommunications, mass media, and construction entities have been targeted by the Paper Werewolf threat operation, also known as GOFFEE, in attacks spreading the novel PowerModul backdoor between July and December, The Hacker News reports.

A new PowerShell backdoor and persistence technique that hijacks TypeLib were discovered.

Android remote access trojan SpyNote has been deployed through fraudulent Google Play websites on newly registered domains as part of a new attack campaign, reports Infosecurity Magazine.

More than 400,000 small and medium-sized business websites have already been targeted by the new artificial intelligence-based AkiraBot spamming tool since September, at least a fifth of which have been bombarded with contact forms and chat widgets, Hackread reports.

Widely used software hosting service SourceForge has been tapped by threat actors to promote pirated software that spreads cryptocurrency mining and clipper malware, also known as ClipBankers, as part of a campaign that has already hit 4,604 users from January to March, most of whom are in Russia, The Hacker News reports.