Malware

New custom RDStealer malware has been leveraged to facilitate a more than a year-long compromise of an IT firm in East Asia, The Hacker News reports.

Security pros should take note of the new JavaScript dropper because both Bumblebee and IcedID are known to deliver ransomware.

Researchers say the Chinese state-backed APT group is continuing to refine its espionage-focused tool set.

The AhnLab Security Emergency Response Center reported that the infostealer had wiretapping features that were previously unknown.

BleepingComputer reports that Indian state-sponsored hacking operation DoNot, also known as APT-C-35, has leveraged three Android apps published by SecurITY Industry on the Google Play Store as part of a spyware campaign aimed at facilitating intelligence-gathering efforts.

Nearly 40 web browsers and more than 70 browser extensions, as well as cryptocurrency wallets, Telegram, and Steam, could have their credentials and other data exfiltrated by the novel Mystic Stealer information-stealing malware, according to The Hacker News.

MacOS targeted by new advanced toolkit Three malicious samples collectively known as JokerSpy have been identified to form a novel elaborate toolkit aimed at compromising macOS devices, reports The Hacker News.