Malware

Windows devices are being hijacked in attacks with the novel LOBSHOT remote access trojan, which is being deployed through Google Ads, reports BleepingComputer.

Google has prevented the publication of 1.43 million bad apps to the Play Store, as well as prohibited 173,000 bad accounts through Play Integrity API and Obfuscated Account ID last year, compared with 1.2 million apps and 190,000 bad accounts blocked in 2021, reports The Hacker News.

Numerous enterprises and consumers across the U.S., Australia, Japan, and India have been compromised in attacks leveraging the updated ViperSoftX information-stealing malware, which features more advanced encryption approaches in addition to traditional anti-analysis techniques, The Hacker News reports.

A federal judge is allowing Google to take down current and future domains tied to the distribution of the CryptBot infostealer malware.

Veeam Backup & Replication instances that have not been patched to remediate the CVE-2023-27532 vulnerability have been subjected to attacks by the Russian FIN7 hacking group facilitating Diceloader, or Lizar, backdoor infections since the end of March, according to SecurityWeek.