Malware

“Several” government agencies fell victim to attackers exploiting a vulnerability in the MOVEit Transfer file transfer application that has plagued the cybersecurity community since its disclosure.

Mandiant, which led the incident response investigation, expressed a "high degree of confidence" that a threat group linked to China is using the zero-day to target and exfiltrate email data from government officials and academics working on topics of interest to Beijing.

Threat actors have been using the new DoubleFinger multi-stage loader to facilitate the deployment of the GreetingGhoul cryptocurrency stealer in attacks targeted at U.S., Latin American, and European users, The Hacker News reports.

According to a report released last week by Trend Micro BAT files hidden by BatCloak demonstrate “a remarkable ability to persistently evade security solutions.”   

Novel PowerDrop malware attacks have been launched against U.S. aerospace defense organizations, with a U.S. defense contractor's network discovered to have already been compromised, BleepingComputer reports.