Malware

Spear-phishing attacks deployed by Chinese state-sponsored threat operation APT10 also known as Stone Panda, Cicada, Bronze Riverside, Potassium, Earth Tengshe, and MirrorFace involved the distribution of continuously updated iterations of the LODEINFO fileless backdoor, first identified in November 2022, The Hacker News reports.

Cryptocurrency platforms have lost $1.7 billion worth of assets from cyberattacks last year, representing a nearly $2 billion drop from 2022, which had the highest-ever losses from cryptocurrency heists, despite a slight increase in attack volume, according to The Record, a news site by cybersecurity firm Recorded Future.

More than 60 different threat operations, including SocGholish and ClearFake actors, have become affiliates of the massive VexTrio malware brokerage program, making the group the most substantial broker of malicious traffic, The Hacker News reports.

Malware distribution on open source package repositories increased 1,300% in the last three years, researchers say.

Cryptowallet-targeting macOS backdoor spread via cracked software BleepingComputer reports that threat actors have leveraged cracked macOS software to facilitate the distribution of information-stealing malware targeting cryptocurrency wallets on devices running on at least macOS Ventura.

Significant enhancements to bolster stealth have been added to the latest variant of the Chaes malware identified as "Chae$ 4.1," Hackread reports.

Attacks exploiting a critical out-of-bounds write zero-day vulnerability in VMware Center Server, tracked as CVE-2023-34048, have been deployed by Chinese cyberespionage operation UNC3886 since 2021, two years before the flaw was identified and addressed, reports The Hacker News.