Malware

More than 2,000 Windows and Linux systems were estimated to have been targeted by information-stealing malware deployed via nine malicious Python Package Index packages, according to Hackread.

BleepingComputer reports that organizations and individuals in China, Japan, and the UK have been targeted by the newly discovered sophisticated China-linked Blackwood threat operation in cyberespionage attacks deploying the advanced NSPX30 malware via update mechanisms for legitimate software.

Mexican enterprises subjected to AllaKore RAT attacks Agriculture, banking, capital goods, commercial services, manufacturing, public sector, retail, and transportation companies across Mexico with annual revenues exceeding $100 million have been targeted with attacks deploying the AllaKore RAT malware to facilitate banking credential and authentication data exfiltration since late 2021, reports The Record, a news site by cybersecurity firm Recorded Future.

Spear-phishing attacks deployed by Chinese state-sponsored threat operation APT10 also known as Stone Panda, Cicada, Bronze Riverside, Potassium, Earth Tengshe, and MirrorFace involved the distribution of continuously updated iterations of the LODEINFO fileless backdoor, first identified in November 2022, The Hacker News reports.

Cryptocurrency platforms have lost $1.7 billion worth of assets from cyberattacks last year, representing a nearly $2 billion drop from 2022, which had the highest-ever losses from cryptocurrency heists, despite a slight increase in attack volume, according to The Record, a news site by cybersecurity firm Recorded Future.

More than 60 different threat operations, including SocGholish and ClearFake actors, have become affiliates of the massive VexTrio malware brokerage program, making the group the most substantial broker of malicious traffic, The Hacker News reports.

Malware distribution on open source package repositories increased 1,300% in the last three years, researchers say.

Cryptowallet-targeting macOS backdoor spread via cracked software BleepingComputer reports that threat actors have leveraged cracked macOS software to facilitate the distribution of information-stealing malware targeting cryptocurrency wallets on devices running on at least macOS Ventura.