Malware

Nearly 2,800 websites, including a Brazilian news site, have been infected with the Atomic macOS Stealer.

Attacks aimed at the end-of-life GeoVision IoT devices involved an exploit using the operating system command injection bugs, tracked as CVE-2024-6047 and CVE-2024-11120.

Malware harvests user credentials and account details from infected systems.

Up to 1,000 e-commerce websites, one of which is tied to a $40 billion global company, have been compromised in a supply chain intrusion involving 21 Magento extensions injected with a backdoor that was only activated last month after six years of dormancy, BleepingComputer reports.

Malicious actors have used the MintsLoader malware loader to distribute the new GhostWeaver backdoor in an attack campaign that involved phishing and the ClickFix technique, Cyber Security News reports.

Increased payload delivery sophistication and additional stealth have been introduced in the latest version of the StealC information-stealing malware, reports GBHackers News.

Malware-as-a-service operation Golden Chickens, also known as Venom Spider, has updated its attack arsenal with the new TerraStealerV2 and TerraLogger information-stealing malware strains, Cybernews reports.