Malware

Suspected Pakistani advanced persistent threat operation Transparent Tribe, also known as APT36, Mythic Leopard, and Operation C-Major, has leveraged trojanized messaging apps MeetUp and MeetsApp to facilitate distribution of the CapraRAT backdoor to Android device users in India and Pakistan, The Hacker News reports.

Thai, Indonesian, and Vietnamese government agencies are being subjected to spear-phishing attacks by the Chinese state-sponsored cyberespionage operation Sharp Panda with the updated Soul malware, according to BleepingComputer.

One hundred or more businesses in North and South America and Europe have been impacted by the ongoing Hiatus hacking campaign that exploits DrayTek Vigor routers to facilitate data exfiltration and establish a covert proxy network, BleepingComputer reports.

Organizations across Eastern Europe are being targeted in a new malware campaign exploiting a Windows User Account Control bypass to distribute the DBatLoader and Remcos RAT malware, according to BleepingComputer.

Threat actors use Google ads and fake Facebook profiles to lure victims into downloading malicious files that steal sensitive data.

BleepingComputer reports that Chinese state-sponsored advanced persistent threat operation Mustang Panda, also known as Bronze President and TA416, has leveraged the new "MQsTTang" custom backdoor in an ongoing campaign that commenced in January.