Malware

Iranian advanced persistent threat group Cobalt Mirage, also known as UNC2448 or Nemesis Kitten, has exploited the Log4j vulnerability to compromise numerous U.S. local government networks with the Drokbk malware since February, according to The Record, a news site by cybersecurity firm Recorded Future.

According to numerous reports, the country’s newly elected government began experiencing problems on the first day Prime Minister Ishmael Kalsakau took office on Nov. 4 and the cyberattack was acknowledged on Nov. 5.

Researchers say security teams have to always look for shifting tactics – in this case Truebot moved to an old tactic: dropping malware on USB drives.

Legitimate Android applications could be compromised with malware without the knowledge of their users who could still enjoy the apps' complete functionality using the Zombinder darknet platform, which adds an obfuscated malware loader to the application code, according to BleepingComputer.

Iran-linked threat operation Agrius has leveraged the new Fantasy data wiper malware in a supply-chain attack targeting South Africa-, Israel-, and Hong Kong-based diamond companies, as well as Israeli HR and IT consulting firms since February, according to The Record, a news site by cybersecurity firm Recorded Future.

Linux devices are being hacked in Bring Your Own Filesystem attacks exploiting the open-source Linux PRoot utility, BleepingComputer reports.