Malware

Cybernews reports that updates have been introduced to the LightSpy surveillance tool to expand its targeting to systems running on older iterations of macOS after initially only targeting iOS devices.

Vulnerable Palo Alto Networks PAN-OS firewalls impacted by the flaw, tracked as CVE-2024-3400, have been targeted by suspected Lazarus Group-linked threat actors to distribute an updated version of the RedTail cryptocurrency mining malware since late April, according to Security Boulevard.

BleepingComputer reports that ongoing intrusions leveraging pirated versions of Microsoft Office have been launched by threat actors to deliver a malware cocktail that includes remote access trojans, malware loaders, and cryptocurrency miners, among others.

More than 100 malware servers leveraged to deploy the IcedID, Trickbot, Pikabot, Smokeloader, Bumblebee, and SystemBC payloads have been disrupted, while 2,000 domains have been sequestered as part of the international law enforcement effort Operation Endgame, which has been touted to be the biggest anti-botnet and dropper malware operation, CyberScoop reports.

Attacks with the novel AllaKore remote access trojan variant dubbed "AllaSenha" were deployed against several banking entities across Brazil — including Banco Safra, Caixa Economica Federal, and Banco de Brasil — in a bid to facilitate credential theft activities, The Hacker News reports.

Hackread reports that major instant messaging and VoIP social platform Discord has been infiltrated with more than 50,000 malicious links during the last six months, most of which were for malware and phishing attacks.

Microsoft says the group leverages social-engineering techniques and has developed its own malware.

Attacks with the CatDDoS malware botnet around the world have significantly ramped up, with the botnet's operators leveraging more than 80 known security vulnerabilities impacting numerous devices from Apache, Cisco, Huawei, Zyxel, and NETGEAR, among others during the last quarter, according to The Hacker News.