Malware

Cybernews reports that AI has been tapped by malicious actors to generate vibe hacking scripts and modular malware for scalable cyber intrusions.

Infosecurity Magazine reports that Iranian threat operation Dust Specter has spoofed Iraq's Ministry of Foreign Affairs to compromise Iraqi government officials with the new SplitDrop, TwinTask, TwinTalk, and GhostForm payloads as part of an AI-powered intrusion campaign initially discovered in January.

Information included Social Security, driver's license and voter records dating to the 1990s.

The SloppyLemming group employed two distinct attack chains to deploy malware.

Windows systems have been covertly compromised with the Teramind endpoint monitoring software for unauthorized surveillance as part of advanced phishing campaigns spoofing Zoom and Google Meet, GBHackers News reports.

Multiple malicious payloads have been distributed in attacks exploiting the Windows File Explorer and WebDAV protocol as part of campaigns that have been ongoing since February 2024 but only significantly escalated in September 2024, according to GBHackers News.

Trojanized tools for the Roblox and Xeno games have been harnessed to deliver a remote access trojan on Windows systems, HackRead reports.