Malware

Here’s what to tell top management about how malware analysis helps security teams protect their companies.

Attacks with the GootLoader malware used to distribute IcedID, REvil, Gootkit, and other payloads have intensified with the appearance of new variants of the loader, which has been associated with the Hive0127 threat operation, also known as UNC2565, reports The Hacker News.

Aside from leveraging malvertising aimed at Microsoft Teams and OneNote, AnyDesk, Google Chrome, and other widely used software, attackers also sought to spread FakeBat via social networking-based social engineering tactics and fraudulent web browser updates.

Organizations have been urged to use Rejetto HFS version 0.52.x to prevent compromise from malware attacks.

Unlicensed versions of the red teaming tool have been connected to multiple malware and ransomware investigation.

Infostealer logs, or data exfiltrated by information-stealing malware, could be leveraged to reveal the identities of thousands of individuals using websites sharing child sexual abuse material over the darknet, reports The Record, a news site by cybersecurity firm Recorded Future.

Attackers have leveraged trojanized versions of Indian software provider Conceptworld's installers for its Copywhiz, Notezilla, and RecentX programs to facilitate the delivery of information-stealing malware, The Hacker News reports.

Defense and manufacturing organizations across South Korea have been subjected to attacks deploying the new Xctdoor malware through a hacked South Korean enterprise resource planning software update server, echoing a technique previously leveraged by North Korean state-sponsored advanced persistent threat operation and Lazarus Group sub-cluster Andariel to facilitate the delivery of the HotCroissant and Riffdoor backdoors, according to The Register.