Malware

An Android spyware operation known as ClayRat that briefly gained traction in Russia has imploded within months of its launch, undone by security blunders and the arrest of its suspected developer, according to The Record, a news site by cybersecurity firm Recorded Future.

North Korean threat operation WaterPlum, which runs the Contagious Interview campaign, has leveraged malicious VS Code projects to deliver the new StoatWaffle malware since December, reports The Hacker News.

TrioTech International, a California-based global semiconductor back-end solutions provider offering manufacturing, testing, and distribution services, has disclosed that its Singaporean subsidiary has been compromised in a March 11 ransomware attack, which has been claimed by the Gunra ransomware operation, according to SecurityWeek.

Ransomware gangs act like agile startups — fast, adaptive, and prone to internal fractures.

FBI warns Iran-linked hackers use Telegram as stealthy malware C2, evading detection.

Perseus is distributed through dropper apps found on phishing sites, masquerading as IPTV services to trick users into sideloading them.

Speagle is designed to target only systems equipped with Cobra DocGuard, a document security and encryption platform.