Malware

Researchers identified a new malware family infecting apps that were installed on more than 620,000 Android devices from the official Google Play store.

New advanced malware techniques have been leveraged by Chinese state-backed threat group Earth Longzhi in a new attack campaign aimed at numerous entities in Taiwan, Fiji, Thailand, and the Philippines, which is the group's first after being inactive for more than half a year, according to The Hacker News.

Malware increasingly spread via ChatGPT-themed lures More threat actors have been leveraging ChatGPT lures to facilitate malware distribution on Facebook, WhatsApp, and Instagram, with Facebook parent firm Meta noting the emergence of 10 malware families using ChatGPT since March, TechCrunch reports.

Cyble researchers say the Python security teams took down the malicious packages within 48 hours, so the impact may have been minimal.

Microsoft's implementation of default macro blocking across Office documents has prompted North Korean state-sponsored threat operation Scarcruft, also known as APT37, Nickel Foxcroft, RedEyes, InkySquid, Ricochet Chollima, and Reaper, to leverage oversized LNK files to facilitate RokRAT malware delivery since last July, according to The Hacker News.

TechRepublic reports that the new Decoy Dog malware toolkit with the Pupy remote access trojan has been discovered by the Infoblox Threat Intelligence Group to be controlling a data exfiltration command-and-control server undetected since last April.