Indian government agencies have been targeted by a spear-phishing campaign by the Pakistani threat group SideCopy distributing an updated ReverseRAT backdoor, The Hacker News reports.
BleepingComputer reports that the advanced persistent threat group Earth Kitsune has launched a watering hole attack aimed at deploying the novel WhiskerSpy backdoor.
Threat actors have been distributing the FatalRAT malware in a new Google Ads campaign impersonating Google Chrome, WhatsApp, Skype, and other applications, reports The Hacker News.
BleepingComputer reports that Microsoft Exchange ProxyShell flaws are being exploited by the new ProxyShellMiner malware to facilitate cryptominer deployment.
Microsoft Internet Information Services servers are being subjected to attacks with the new Frebniss malware, which enables stealthy command execution through web requests, reports BleepingComputer.
Novel open-source command-and-control framework Havoc has been gaining traction among threat actors, with more attackers using the post-exploitation framework in place of Cobalt Strike and Brute Ratel, according to BleepingComputer.
This week Dr. Doug civilly discusses: a Liquid Robot Death Punch, Korean cars, Fortinet, Frebniis, Atlassian, BingBots, Hacking Back, Derek Johnson covers the National Cyber Strategy documents and more on the Security Weekly News!
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.