Malware

Security pros say this new research from Cisco Talos shows how adaptable threat actors are as defenders work to mitigate attacks.

BleepingComputer reports that Russian hacking operation Sandworm is being tied by the Computer Emergency Response Team of Ukraine to a significant CaddyWiper malware attack against Ukraine's national news agency Ukrinform.

Nozomi Networks reported that wiper malware, IoT botnet activity, and the Russia-Ukraine war significantly influenced the threat landscape last year.

Threat actors could exploit the port forwarding feature in cloud-based configurable development environment GitHub Codespaces to facilitate malware delivery, according to The Hacker News.

BleepingComputer reports that three malicious packages have been uploaded by Lolip0p on the Python Package Index to spread information stealing malware.

Qihoo Netlab 360 researchers have discovered the active distribution of a novel backdoor based on the Central Intelligence Agency's Hive multi-platform malware suite, according to The Hacker News.

Malicious actors have been leveraging trojanized VPN installers to facilitate the distribution of EyeSpy spyware since May, The Hacker News reports.

Threat actors have been actively exploiting an already addressed critical vulnerability impacting the Cacti device monitoring tool, tracked as CVE-2022-46169, to deliver the Mirai malware and PERL-based IRC botnet that resulted in the opening of a host-based reverse shell, according to BleepingComputer.