Malware

Intrusions with Eagerbee involved the delivery of a payload file-loading injector, which is executed upon system start before commencing the exploitation of Themes, SessionEnv, MSDTC, and IKEEXT to facilitate in-memory backdoor writing.

PhishWP imitates trusted payment services and sends stolen information directly to Telegram.

Malicious emails using code of conduct-related lures deceive targets into opening an image file-spoofing RAR archive that deploys a Windows executable that runs PLAYFULGHOST.

The “Bad Likert Judge” method asks the LLM to evaluate a prompt’s harmfulness, then provide a harmful example.

While the app gets distributed via a GitHub phishing site, all Android users worldwide are at risk.

Quasar RAT has circulated in cybercrime and APT campaigns since July 2014.

Malicious job offers purporting to be from widely known companies have been leveraged by threat actors to facilitate the distribution of cryptocurrency-stealing malware, reports Cybernews.

Attacks with the new VBCloud malware have been deployed by Russian state-backed threat operation Cloud Atlas, also known as Clean Ursa, Oxygen, Inception, and Red October, to facilitate data theft against dozens of users, most of whom are in Russia, reports The Hacker News.