Malware

SecurityWeek reports that Rust package registry Crates.io has been targeted by an attempted malware attack involving typosquatted packages that has been averted with the immediate identification and removal of the malicious packages.

BleepingComputer reports that attacks with the Smoke Loader botnet have been observed to deploy the novel Whiffy Recon malware, which leverages Wi-Fi scanning and Google's geolocation API to determine where compromised devices are located.

Overall cyberattack median dwell times have declined from 10 days in 2022 to eight days in the first half of 2023, BleepingComputer reports.

Cisco Talos reports that the Lazarus Group leverages the ManageEngine ServiceDesk vulnerability to target a midsized internet backbone provider in the UK and multiple health care entities in the United States.

TraderTraitor is one of North Korea’s greatest weapons in its “hack for profit” schemes, and has a long and successful history of targeting cryptocurrency companies and other sectors for financial gain.

Organizations across Asia, especially in Hong Kong, have been targeted by a software supply chain attack by the newly discovered Carderbee hacking operation that commenced in April, CyberScoop reports.

Unknown threat actors who appear to be aligned with China’s interests carried out “one of the most audacious” attacks Black Lotus Labs researchers have ever seen.