Malware

Perhaps even more notable than its fast ransomware encryption speeds is the Rorschach variant’s ability to evade detection using highly unusual, and effective, threat tactics.

A new attack leverages the Log4j vulnerability for initial access to install malware on a victim’s device to steal bandwidth.

Securonix cybersecurity experts say a group dubbed "TACTICAL#OCTOPUS" has been active amid the approach of the April 18 U.S. tax deadline and spreading malware via fake tax-related file downloads, reports The Record, a news site by cybersecurity firm Recorded Future.

Researchers at Trend Micro warn that a new type of malware known as OpcJacker has been active since the second half of 2022 and is being spread through a malvertising campaign, The Hacker News reports.

Security researchers and users confirm that the popper.js JavaScript infected the eFile.com site, an IRS-authorized e-file provider.

A malicious campaign was caught heavily loading spam packages in NPM, which resulted in a denial-of-services (DoS) and caused the registry service to be sporadically unavailable.