Malware

Threat researchers identified a variant of the credential-stealing malware targeting popular web browsers.

Two new LockBit variants have been spotted in the wild: one appears to rely on Conti source code, while another targets Mac devices.

US accounting firms warned of new phishing campaign BleepingComputer reports that accounting and tax return preparation firms and individuals across the U.S. have been warned by Microsoft regarding an ongoing phishing campaign involving the distribution of the Remcos remote access trojan malware since February in an attempt to exploit the imminent end of the annual tax season.

An Android zero-day that exploited millions of devices via a Chinese ecommerce app was added to CISA's catalog of known exploited vulnerabilities.

Security researchers say zero-click exploits are real and can spread to the mobile devices at rank-and-file enterprises.