Malware

Malwarebytes Labs researchers say users get tricked into loading malware because the fraudulent ads tend to get better placement than the legitimate search.

BleepingComputer reports that several U.S. financial institutions and numerous cryptocurrency apps are having their users mostly targeted by an expanded Xenomorph malware campaign leveraging an updated version of the Android banking trojan that also set sights on users in Canada, Italy, Spain, Belgium, and Portugal.

An authentic-looking page and an almost genuine URL can be enough to entice users to download malicious software.

Group-IB links suspected ransomware-as-a-service affiliate ShadowSyndicate to Quantam, Nokoyawa and ALPHV ransomware groups.

The National Student Clearinghouse reported that more than 51,000 individuals were impacted by this latest MOVEit incident.

More than 40 banks in Mexico and Brazil have been subjected to a new malware campaign involving a new variant of the BBTok banking trojan meant to exfiltrate data for hijacking online bank accounts, according to The Hacker News.

New cyberespionage attacks have been launched by the Stealth Falcon threat operation, also known as FruityArmor, using the novel sophisticated Deadglyph malware, The Hacker News reports.