Malware

New DBatLoader campaign sets sights on Turkey Turkish Windows users have been subjected to a new phishing campaign spreading the ModiLoader malware, also known as DBatLoader, reports GBHackers News.

Widely used VMware environment reporting utility RVTools had its website compromised to facilitate the distribution of a trojanized installer that spreads the Bumblebee malware, reports The Hacker News.

Intrusions involved the distribution of KeeLoader through the still operational keeppaswrd[.]com website.

Malicious payloads embedded in Procolored printers Digital printing solutions provider Procolored has offered printers with software drivers compromised with the XRed remote access trojan and the SnipVex clipbanker tool, reports GBHackers News.

Hackread reports that Russian developers have been targeted by a suspected pro-Ukraine hacktivist operation with the debugging tool-spoofing Python Package Index repository package "dbgpkg" that facilitates malicious code execution and information exfiltration.

More ransomware gangs, including Black Basta and Cactus, have been leveraging the new Skitnet malware, also known as Bossnet, for covert post-exploitation operations since earlier this year, reports BleepingComputer.

Newly emergent malware loader TransferLoader features several components that facilitate arbitrary command execution on targeted systems, with the loader having been leveraged to distribute the Morpheus ransomware in an attack against a U.S. law firm, reports GBHackers News.