Malicious websites hosting pirated movies, music, or video games have been leveraged to distribute the new variant of the ChromeLoader browser hijacker dubbed "Shampoo" since March, BleepingComputer reports.
Windows systems in the U.S., Europe, and Southeast Asia had sensitive data exfiltrated in attacks with the novel Go-based Skuld information-stealing malware, which was similar to the BlackCap Grabber, Luna Grabber, and Creal Stealer backdoors, reports The Hacker News.
“Several” government agencies fell victim to attackers exploiting a vulnerability in the MOVEit Transfer file transfer application that has plagued the cybersecurity community since its disclosure.
Mandiant, which led the incident response investigation, expressed a "high degree of confidence" that a threat group linked to China is using the zero-day to target and exfiltrate email data from government officials and academics working on topics of interest to Beijing.
Threat actors have been using the new DoubleFinger multi-stage loader to facilitate the deployment of the GreetingGhoul cryptocurrency stealer in attacks targeted at U.S., Latin American, and European users, The Hacker News reports.
According to a report released last week by Trend Micro BAT files hidden by BatCloak demonstrate “a remarkable ability to persistently evade security solutions.”
