Malware

The Iranian threat group is attacking the defense industry base with a previously unseen backdoor Microsoft has dubbed "FalseFont."

Organizations in the defense industrial base industry are having their employees targeted by Iranian nation-state threat operation APT33, also known as Peach Sandstorm, Refined Kitten, or HOLMIUM, in attacks involving the novel FalseFont malware, BleepingComputer reports.

Windows and macOS systems have been subjected to attacks leveraging the novel Go-based information-stealing malware JaskaGO, reports The Hacker News.

Seventy percent of gas stations across Iran had their services disrupted by a cyberattack.

Organizations in the hospitality industry have been targeted by a new phishing campaign distributing the QakBot, or QBot, malware months after the botnet was taken down in a law enforcement operation, according to BleepingComputer.

BleepingComputer reports that significant improvements have been made to the newest versions of the Rhadamanthys information-stealing malware, which initially targeted email, online banking, and FTP credentials upon its discovery in August 2022.

SiliconAngle reports that cyberattacks involving 29 malware families have compromised 1,800 financial apps around the world during the past 12 months, indicating mounting mobile banking heists.

Novel stealthy NKAbuse malware detailed BleepingComputer reports that Mexico-, Vietnam-, and Colombia-based Linux systems have been primarily impacted by the new stealthy NKAbuse multi-platform malware, which is the first-ever backdoor exploiting the New Kind of Network data exchange technology.