Malware

Cybernews reports that Windows systems have been injected with various backdoors for long-term compromise as part of a new CrashFix attack campaign.

GBHackers News reports that more than 400,000 machines around the world have been targeted with the RenEngine Loader malware that spreads the ACR Stealer as part of an attack campaign that has been underway since April.

Intrusions with the Odyssey Stealer malware against macOS systems worldwide have swelled over the past few days, with threat actors mostly targeting Apple computers in the U.S., France, and Spain, Cyber Security News reports.

Tirith operates by integrating with various shells such as zsh, bash, fish, and PowerShell, scrutinizing every command pasted for execution.

The Prometei botnet likely gained access to the construction firm's server by exploiting weak or default passwords via the Remote Desktop Protocol (RDP).

DKnife's modular architecture allows for a wide range of malicious activities, including hijacking binary downloads and Android application updates to deliver malware like the ShadowPad and DarkNimbus backdoors.

This evolution coincided with the re-establishment of internet access following a government-imposed blackout, according to a report by SafeBreach.