Malware

Several organizations, including those managing U.S. critical infrastructure, have been targeted by an AsyncRAT malware campaign during the past 11 months, BleepingComputer reports.

Attacks with an updated iteration of the Bandook remote access trojan have been launched against Windows machines, reports The Hacker News.

The Register reports that significant outages have impacted Orange Spain, the country's second-largest network provider, following the compromise of its account with RIPE, the regional internet registry used by Europe, the Middle East, and Central Asia.

Dubbed "the first malware of 2024,” SpectralBlur uniquely uses a pseudo-terminal to remotely execute commands.

Threat actors have sought to compromise Linux systems with the CoinMiner cryptocurrency mining malware through three novel malicious Python Package Index repository packages, which have been cumulatively downloaded 431 times before being removed from the PyPI repository, reports The Hacker News.

Ukraine has been targeted by the UAC-0050 threat operation with more advanced phishing attacks spreading the Remcos RAT surveillance tool, which involved the use of a pipe technique for interprocess communication in a bid to better bypass security system detection, according to The Hacker News.

BleepingComputer reports that expired authentication cookies are being revived for account access by numerous information-stealing malware strains by leveraging the newly discovered MultiLogin Google OAuth endpoint.