Malware

SecurityWeek reports that federal agencies have been ordered by the Cybersecurity and Infrastructure Security Agency to remediate within three weeks a Linux kernel bug, tracked as CVE-2021-3493, which has been added to the agency's Known Exploited Vulnerabilities Catalog following active exploitation by the new stealthy Linux malware Shikitega.

Patched VMware flaw leveraged in various malware campaigns Multiple malware campaigns have been exploiting the already-addressed VMware Workspace ONE Access flaw, tracked as CVE-2022-22954, to facilitate the ransomware and cryptominer distribution, The Hacker News reports.

BleepingComputer reports that more than 200 domains have been leveraged in a new massive typosquatting campaign spoofing 27 different brands to distribute Windows and Android malware.

Sixteen Android apps downloaded more than 20 million times have been found to be infected with the new Clicker malware, which facilitates mobile ad fraud, reports The Hacker News.

Iranian state-sponsored threat group Domestic Kitten, also known as APT-C-50, has deployed the updated FurBall Android spyware in mobile surveillance campaigns targeted at Iranian citizens, BleepingComputer reports.

BleepingComputer reports that a suspected member of the Lapsus$ hacking group has been apprehended by the Brazilian Federal Police as part of its Operation Dark Cloud, which sought to gather information regarding the extortion gang's numerous attacks against Brazil's government agencies since last December.

Chinese hacking group Winnti, also known as APT41, Wicked Panda, Bronze Atlas, and Barium, has launched an onslaught of attacks against Asian government entities, The Hacker News reports.

Washington-based Whitworth University has confirmed being impacted by a ransomware attack that has resulted in a data breach, which may have impacted 5,182 state residents, according to The Spokesman-Review.