Malware

Windows systems across Latin America have been targeted with malicious payloads delivered through a sophisticated phishing attack campaign, The Hacker News reports.

The remote access trojan creates a second hidden desktop to control the victim’s browser.

BleepingComputer reports that phishing attacks with an updated JSOutProx remote access trojan variant have been deployed against financial entities in South and Southeast Asia, the Middle East, and Africa.

Organizations in the oil and gas industry have been targeted with a phishing campaign that involved the deployment of a new Rhadamanthys information-stealing malware variant, The Hacker News reports.

Proofpoint researchers say new malware aligns with trend by cybercriminals to find more creative ways to bypass defenders.

Organizations in Italy, Sweden, and Poland have been targeted by expanded attacks with the Mispadu banking trojan, also known as URSA, as part of an ongoing campaign that originally targeted financial, commercial, automotive manufacturing, and service entities, as well as law firms across Latin America, The Hacker News reports.

BleepingComputer reports that Google has been working on curbing browser cookie theft with the new Device Bound Session Credentials functionality in Chrome as it prepares to remove third-party cookies from the browser.