Malware

New ASMCrypt malware loader detailed Novel malware crypter and loader ASMCrypt has been developed by cybercriminals building upon the stealthy DoubleFinger malware loader, which was previously leveraged to facilitate GreetingGhoul cryptocurrency stealer deployment, according to The Hacker News.

Hackers tricked an employee into downloading the previously unseen malware by claiming he was in the running for a job at Meta.

Most software supply chain organizations have fallen behind tracking malware – here’s how to correct that.

Malwarebytes Labs researchers say users get tricked into loading malware because the fraudulent ads tend to get better placement than the legitimate search.

BleepingComputer reports that several U.S. financial institutions and numerous cryptocurrency apps are having their users mostly targeted by an expanded Xenomorph malware campaign leveraging an updated version of the Android banking trojan that also set sights on users in Canada, Italy, Spain, Belgium, and Portugal.

An authentic-looking page and an almost genuine URL can be enough to entice users to download malicious software.

Group-IB links suspected ransomware-as-a-service affiliate ShadowSyndicate to Quantam, Nokoyawa and ALPHV ransomware groups.

The National Student Clearinghouse reported that more than 51,000 individuals were impacted by this latest MOVEit incident.