Malware

Ninety-two more apps, nearly half of which are on Google Play, that have cumulatively amassed more than 30 million installations were discovered to be compromised with the SpinOk malware, which has been distributed through a malicious software development kit supply chain attack, BleepingComputer reports.

Activity of the TrueBot downloader trojan botnet, which is associated with the Silence threat operation linked with Evil Corp, has significantly increased last month, reports The Hacker News.

Users of MoveIT Transfer 'should assume compromise, not just patch', say experts.

New Vidar malware campaign sets sights on online sellers BleepingComputer reports that new attacks deploying the Vidar information-stealing malware have been launched against online sellers during the past week.

QBot malware, also known as QakBot and Pinkslipbot, has been leveraging an adaptable command-and-control infrastructure, with half of its servers only active for a week and a quarter only active for a day, according to The Hacker News.

BleepingComputer reports that several email accounts owned by Spanish-speaking users across Latin America have been hijacked by the newly-discovered ongoing Horabot botnet campaign, which has been delivering a banking trojan and spam tool since November 2020.