Malware

Several adware, malware, and phishing apps masquerading as system optimizers and utilities have been downloaded more than two million times cumulatively from the Google Play Store, reports BleepingComputer.

Malicious Android apps have been signed by threat actors through the exploitation of platform certificates used by device vendors Samsung, LG, and MediaTek, The Hacker News reports.

Russia targeted by novel CryWiper malware Cyberattacks leveraging the novel CryWiper data wiper malware that poses as ransomware were reported by Kaspersky and Russian news service Izvestia to have been targeted at Russian mayors' offices and courts, according to Ars Technica.

Networks and cryptocurrency assets have been targeted by North Korean state-sponsored hacking group Lazarus in the new BloxHolder campaign, which leverages fraudulent cryptocurrency apps to distribute the AppleJeus malware, BleepingComputer reports.

In its monthly global ransomware report, cybersecurity company BlackFog said the 42 publicly disclosed ransomware attacks in November is a 180% year over year increase.

Novel DuckLogs malware-as-a-service detailed More than 6,000 victims have been compromised by the new DuckLogs malware-as-a-service operation, whose platform is being leveraged by over 2,000 cybercriminals, according to BleepingComputer.

BleepingComputer reports that Redis servers that remain unpatched to CVE-2022-0543 are being compromised with the novel Go-based Redigo malware, which is not yet detected on VirusTotal antivirus engines.