Malware

BleepingComputer reports that Microsoft OneNote attachments are being leveraged in phishing emails aimed at deploying remote access trojans for secondary malware deployment, as well as password and cryptocurrency theft.

Ukraine's military and law enforcement sectors are being attacked by Russian state-backed cyberespionage operation Gamaredon with the use of the Telegram messaging app, The Hacker News reports.

Suspected Chinese threat actors have exploited a recently fixed Fortinet FortiOS zero-day vulnerability, tracked as CVE-2022-42475, to launch attacks with the new Boldmove malware targeted at a European government organization and an African managed service provider, according to The Record, a news site by cybersecurity firm Recorded Future.

The Los Angeles Unified School District has disclosed that files with contractors' Social Security numbers and other personal data were stolen by the Vice Society ransomware operation in an attack over the Labor Day weekend, reports BleepingComputer.

Security pros say the threat actors shifted to Excel-based XLL add-ins once Microsoft hardened macros last year after the software giant made the move to further stymie the bad guys.

HR announcements and benefit updates are the latest shift in techniques to make attacks more relevant to potential victims, security researchers say.

Yum Brands, which owns KFC, Taco Bell, and Pizza Hut, had some of its IT systems compromised by a ransomware attack, resulting in the theft of company data, according to TechCrunch.