Malware

BleepingComputer reports that Google has been working on curbing browser cookie theft with the new Device Bound Session Credentials functionality in Chrome as it prepares to remove third-party cookies from the browser.

Cyberthreat operation Earth Freybug, which is a subset of Chinese state-sponsored threat group APT41, has leveraged the novel UNAPIMON malware with API unhooking to facilitate stealthier intrusions against organizations from different industries around the world, The Hacker News reports.

Almost 30 malicious VPN apps with proxyware enabled by a Golang library allowed Android devices to perform as residential proxies that could be leveraged for illicit cyber activity as part of the PROXYLIB operation, reports The Hacker News.

Industrial, manufacturing, financial, trading, travel, and government organizations in the U.S., Mexico, Colombia, Brazil, Argentina, Dominican Republic, Spain, and Portugal have been targeted with new attacks by the TA588 cybercrime operation distributing the Venom RAT malware, The Hacker News reports.

Threat actors have been leveraging malicious ads and websites to facilitate ongoing information-stealing malware attacks against macOS devices, The Hacker News reports.

BleepingComputer reports that more advanced features and increased stealth have been added to the updated Vultur Android banking trojan, which is being distributed via hybrid attacks.

Malware first identified in 2014 re-emerges and gets delivered by the criminal proxy service Faceless, now growing at 7,000 users per week.

TechCrunch reports that an investigation into a credential stealing malware campaign has been commenced by major videogame developer Activision Blizzard following claims of malware infections from the usage of cracked software.