Malware

BleepingComputer reports that Microsoft Office executables have been discovered to be living-off-the-land binaries and scripts, which could be leveraged to facilitate malware downloads from a remote server.

Organizations across the U.S. have been urged by the Cybersecurity and Infrastructure Security Agency to strengthen the defenses of their UEFI software amid increasing attacks as evidenced by the emergence of the BlackLotus bootkit malware, according to SecurityWeek.

Traditionally reliant on donations to fund their attacks, so-called hacktivist groups are increasingly looking for alternative revenue streams.

SiliconAngle reports that Amazon Web Services' System Manager Agent for DevOps could be exploited as an integrated remote access trojan for Windows and Linux systems through a novel post-exploitation attack, which facilitates communications between an endpoint agent and an attacker-owned AWS account.

Cybersecurity researchers reported discovering a previously unknown phishing campaign distributing two variants of an infostealer written in Python to take over Facebook business accounts.

Malware security threats against operational technology and Internet of Things environments rose by 20-fold during the past six months, according to SiliconAngle.

Italian organizations have been targeted by the TA544 and TA551 threat operations in phishing campaigns deploying the novel sophisticated downloader malware WikiLoader since December, reports The Record, a news site by cybersecurity firm Recorded Future.