Malware

BleepingComputer reports that ongoing intrusions leveraging pirated versions of Microsoft Office have been launched by threat actors to deliver a malware cocktail that includes remote access trojans, malware loaders, and cryptocurrency miners, among others.

More than 100 malware servers leveraged to deploy the IcedID, Trickbot, Pikabot, Smokeloader, Bumblebee, and SystemBC payloads have been disrupted, while 2,000 domains have been sequestered as part of the international law enforcement effort Operation Endgame, which has been touted to be the biggest anti-botnet and dropper malware operation, CyberScoop reports.

Attacks with the novel AllaKore remote access trojan variant dubbed "AllaSenha" were deployed against several banking entities across Brazil — including Banco Safra, Caixa Economica Federal, and Banco de Brasil — in a bid to facilitate credential theft activities, The Hacker News reports.

Hackread reports that major instant messaging and VoIP social platform Discord has been infiltrated with more than 50,000 malicious links during the last six months, most of which were for malware and phishing attacks.

Microsoft says the group leverages social-engineering techniques and has developed its own malware.

Attacks with the CatDDoS malware botnet around the world have significantly ramped up, with the botnet's operators leveraging more than 80 known security vulnerabilities impacting numerous devices from Apache, Cisco, Huawei, Zyxel, and NETGEAR, among others during the last quarter, according to The Hacker News.

TechCrunch reports that U.S. consumer-grade spyware app pcTattletale claimed to be hacked by a threat actor purporting to have exposed the app's internal data, including information stolen from its victims, to its website.

The Hacker News reports that several fake websites offering antivirus software from Avast, Malwarebytes, and Bitdefender have been leveraged by threat actors to distribute various information-stealing malware strains.