Malware

More than 38,000 different sub-domains have been utilized to host fraudulent cryptocurrency wallet websites on Amazon S3 and Azure Web Apps as part of the far-reaching FreeDrain cryptocurrency phishing campaign, reports The Hacker News.

Hackread reports that fraudulent artificial intelligence platforms promoted via Facebook ads have been harnessed to deploy the novel Noodlophile Stealer malware as part of a multi-stage attack.

Updated attack arsenal leveraged in MirrorFace attacks against Japan, Taiwan Attacks with the ROAMINGHOUSE malware and an updated ANEL backdoor have been launched by Chinese hacking operation MirrorFace, also known as Earth Kasha, against Japanese and Taiwanese government agencies and public entities as part of a new cyberespionage campaign, according to The Hacker News.

Increase in attacks using malware known as “TheMoon" seen, says FBI.

North Korean groups give away their intentions with common blunders and activity patterns.

Attacks with the updated Inferno Drainer involved the exploitation of Discord to facilitate redirection to phishing sites.

COLDRIVER begins intrusions by displaying a website with a bogus CAPTCHA meant to lure targets into downloading a PowerShell script.

Discord bot developers have been targeted with the new malicious utility-spoofing Python Package Index repository "discordpydebug."