Malware

The MaliBot banking trojan has become the third-most prolific malware targeting Android users in June, behind the AlienBot malware-as-a-service family and the Anubis banking trojan, despite only emerging last month, ZDNet reports.

The Hacker News reports that new variants of the ChromeLoader info-stealing malware, also known as ChromeBack and Choziosi Loader, have been discovered.

Threat actors may be on the cusp of a major cryptomining operation with the new CuteBoi operation, which involved the creation of 1,283 JavaScript packages on NPM using more than 1,000 user accounts, reports The Register.

BleepingComputer reports that fake copyright infringement warnings using Yandex Forms are being leveraged for IcedID malware distribution.

Intezer Labs researchers discovered that systems running on Linux are being backdoored with the new OrBit malware that not only enables stealthy data exfiltration but also performs process infection, according to BleepingComputer.

QNAP network-attached storage devices are under attack from the novel Checkmate ransomware strain that exploits internet-exposed Server Message Block services, reports The Record, a news site by cybersecurity firm Recorded Future.

Ukraine has been targeted by Trickbot malware operators since the Russia-Ukraine war commenced in February, representing a significant shift in the operations of Trickbot, according to The Hacker News.