Russian government, energy, telecommunications, mass media, and construction entities have been targeted by the Paper Werewolf threat operation, also known as GOFFEE, in attacks spreading the novel PowerModul backdoor between July and December, The Hacker News reports.
Android remote access trojan SpyNote has been deployed through fraudulent Google Play websites on newly registered domains as part of a new attack campaign, reports Infosecurity Magazine.
More than 400,000 small and medium-sized business websites have already been targeted by the new artificial intelligence-based AkiraBot spamming tool since September, at least a fifth of which have been bombarded with contact forms and chat widgets, Hackread reports.
Widely used software hosting service SourceForge has been tapped by threat actors to promote pirated software that spreads cryptocurrency mining and clipper malware, also known as ClipBankers, as part of a campaign that has already hit 4,604 users from January to March, most of whom are in Russia, The Hacker News reports.
Hackread reports that four U.S. and European companies have been compromised by the HellCat ransomware-as-a-service operation in attacks that exploited information-stealing malware-harvested Atlassian Jira credentials.
