Malware

Attacks with the novel TOINTOIN banking trojan have been deployed against the Windows systems of businesses in Latin America since May, according to The Hacker News.

The malicious apps triggers mobile phone infection and activates voice-based phishing targeting financial scams.

Up to 1.5 million Android users have been impacted by two spyware apps impersonating file management tools named "File Recovery and Data Recovery" and "File Manager" in the Google Play store that send exfiltrated data to China-based servers, reports The Hacker News.

Proofpoint researcher tells SC Media campaign targeted — fewer than 10 individuals who received spearphishing emails from TA453, aka "Charming Kitten."

Time for security teams to make mitigating bad bots a top priority.

Financial services organizations around the world, especially banks in Spain and Chile, have been subjected to an Android malware campaign by the Mexico-based threat actor Neo_Net between June 2021 and April 2023, reports The Hacker News.

BleepingComputer reports that Andariel, a sub-group of North Korean state-sponsored hacking operation Lazarus Group, has leveraged the newly-discovered EarlyRAT malware in attacks abusing the Log4Shell vulnerability last year.