Malware

Several Java applications have been targeted by a new variant of the FritzFrog botnet, which has gained the ability to exploit the Log4Shell vulnerability, as part of the Frog4Shell attack campaign, reports The Record, a news site by cybersecurity firm Recorded Future.

Threat actors have targeted internet-exposed Docker API endpoints with the advanced Commando Cat cryptojacking campaign since the beginning of the year, The Hacker News reports.

Interpol has disclosed the disruption of 70% of 1,300 malicious command-and-control servers leveraged in malware and phishing attacks, as well as the arrests of 31 suspected threat actors as part of its Operation Synergia between September and November that involved almost 60 police agencies and private firms, according to The Record, a news site by cybersecurity firm Recorded Future.

More than 2,000 computers across Ukraine were noted by the country's Computer Emergency Response Team to have been compromised as part of a widespread attack campaign with the modular Windows botnet payload PurpleFox, also known as DirtyMoe, which could be leveraged to facilitate further payload deployment and distributed denial-of-service intrusions, BleepingComputer reports.

Popular instant messaging service Telegram has become a haven for cybercriminals and other threat actors looking to conduct phishing attacks due to the widespread availability of malicious tools and hackers-for-hire services across the platform, according to The Hacker News.

Health, transportation, logistics, and transportation organizations across Italy have been targeted by the UNC4990 threat operation in a new attack campaign involving weaponized USB drives used to facilitate the distribution of malware hosted on widely used websites, reports The Hacker News.

More sophisticated attack techniques have been integrated into the updated version of the Zloader malware also known as Silent Night, DELoader, and Terdot distributed in a campaign almost two years after the botnet had its infrastructure disrupted, according to The Hacker News.