Malware

Malware increasingly spread via ChatGPT-themed lures More threat actors have been leveraging ChatGPT lures to facilitate malware distribution on Facebook, WhatsApp, and Instagram, with Facebook parent firm Meta noting the emergence of 10 malware families using ChatGPT since March, TechCrunch reports.

Cyble researchers say the Python security teams took down the malicious packages within 48 hours, so the impact may have been minimal.

Microsoft's implementation of default macro blocking across Office documents has prompted North Korean state-sponsored threat operation Scarcruft, also known as APT37, Nickel Foxcroft, RedEyes, InkySquid, Ricochet Chollima, and Reaper, to leverage oversized LNK files to facilitate RokRAT malware delivery since last July, according to The Hacker News.

TechRepublic reports that the new Decoy Dog malware toolkit with the Pupy remote access trojan has been discovered by the Infoblox Threat Intelligence Group to be controlling a data exfiltration command-and-control server undetected since last April.

The New Jersey appellate court decision in favor of Merck has been heralded as a win for ensuring courts narrowly interpret insurance policies.

More than 500,000 devices around the world have been compromised with variants of the S1deload Stealer and SYS01stealer and other information-stealing malware over the last three months as part of a Vietnamese threat actor's malverposting campaign, according to The Hacker News.