Identification and analysis efforts have been evaded for weeks by a new Windows remote access trojan through the use of corrupted Disk Operating System and Portable Executable headers, which could have provided more insights regarding the executable, according to The Hacker News.
Investment, banking, energy, and insurance organizations around the world are having their chief financial officers and other finance executives subjected to a spear-phishing campaign distributing the NetBird malware, reports GBHackers News.
Threat actors have been leveraging bogus installers for several artificial intelligence platforms to facilitate compromise with the CyberLock and Lucky_Gh0$t ransomware payloads, as well as the novel Numero malware, The Hacker News reports.
Chinese state-sponsored hacking operation APT41, also known as Winnti, had attack infrastructure deploying the novel ToughProgress malware, which leverages Google Calendar for command-and-control, dismantled by the Google Threat Intelligence Group, BleepingComputer reports.
GBHackers News reports that Android devices are at risk of being completely taken over by the newly emergent GhostSpy malware, which features sophisticated persistence, anti-detection, and surveillance mechanisms.
VenomRAT spread via fake Bitdefender site Threat actors have been leveraging a fraudulent website promoting Bitdefender antivirus software to distribute the VenomRAT remote access trojan as part of a new attack campaign, The Hacker News reports.
Information-stealing malware has been spread through a trio of malicious Python Package Index packages purporting to provide a Python SDK for Alibaba's artificial intelligence services, which have accumulated almost 1,600 downloads prior to their removal from the PyPI repository, reports Infosecurity Magazine.
