Malware

Attacks with the Mirai botnet malware were disclosed by Juniper Networks to have been targeted at its Session Smart Routers with default passwords, according to reports.

FBI says malware operation is building a botnet out of smart cameras and video boxes.

BleepingComputer reports that the U.S. has imposed a five-year prison sentence on Ukrainian national Mark Sokolovsky months after pleading guilty to spearheading the Raccoon Stealer malware-as-a-service operation.

A 32-year-old was sentenced on criminal hacking charges related to a data-stealing malware operation.

Attacks involved impersonation of a user's client through a call on Microsoft Teams that successfully lured targets into downloading AnyDesk following the failed installation of the Microsoft Remote Support app, a report from Trend Micro revealed.

Bitter leveraged phishing emails with foreign investment project lures to spread a RAR archive containing a shortcut link, which when opened prompted PowerShell execution in alternative data streams and a scheduled task that facilitates malicious curl commands, including one that retrieves WmRAT, an analysis from Proofpoint showed.

After targeting the organization with the Microsoft OneDrive-targeting Careto2 and Google Drive-targeting Goreto malware frameworks in 2019, The Mask subjected the entity to yet another attack involving the exploitation of the WorldClient webmail component for persistence three years later, according to a Kaspersky analysis.

Attacks involved the addition of a BeMob URL to the ad management system of the Monetag website monetization platform, also known as Omnatuor or Vane Viper, in an effort to enable TDS redirection to fake CAPTCHA pages hosted on various legitimate services, according to a Guardio Labs report.