Malware

Prestige ransomware attacks against Ukraine and Poland have been conducted by Russian hacking group Iridium, which has overlapped with the Sandworm threat operation, according to The Record, a news site by cybersecurity firm Recorded Future.

Worok backdoor concealed in PNG images The Worok threat group has been confirmed by Avast researchers to be leveraging PNG images as a means to conceal information-stealing malware, following earlier findings by ESET assuming such a threat vector, reports BleepingComputer.

The LockBit ransomware gang has been selling files stolen from German multinational automotive parts manufacturer Continental for $50 million, according to SecurityWeek.

California-based Merced College has been impacted by a malware attack on Nov. 3 that resulted in the significant disruption of its network, reports SiliconAngle.

Outlook and Thunderbird account credentials are being stolen by the novel StrelaStealer info-stealing malware, BleepingComputer reports.

More threat actors have been leveraging the InterPlanetary File System for bulletproof malware hosting, SecurityWeek reports.

A malicious Chrome browser extension steals the information available during a browser session and then installs malware to assume control of the entire device.